Home

Awesome

subjs

License Go ReportCard

subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more.

It's recommended to pair this with gau and then https://github.com/GerbenJavado/LinkFinder

Resources

Usage:

Examples:

$ cat urls.txt | subjs 
$ subjs -i urls.txt
$ cat hosts.txt | gau | subjs

To display the help for the tool use the -h flag:

$ subjs -h
FlagDescriptionExample
-cNumber of concurrent workerssubjs -c 40
-iInput file containing URLSsubjs -i urls.txt
-tTimeout (in seconds) for http client (default 15)subjs -t 20
-uaUser-Agent to send in requestssubjs -ua "Chrome..."
-versionShow version numbersubjs -version"

Installation

From Source:

$ GO111MODULE=on go get -u -v github.com/lc/subjs@latest

From Binary

You can download the pre-built binaries from the releases page and then move them into your $PATH.

$ tar xvf subjs_1.0.0_linux_amd64.tar.gz
$ mv subjs /usr/bin/subjs

Useful?

<a href="http://buymeacoff.ee/cdl" target="_blank"><img src="https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png" alt="Buy Me A Coffee" style="height: 41px !important;width: 174px !important;box-shadow: 0px 3px 2px 0px rgba(190, 190, 190, 0.5) !important;-webkit-box-shadow: 0px 3px 2px 0px rgba(190, 190, 190, 0.5) !important;" ></a>