JS Finder Pro

Professional JavaScript reconnaissance tool. Extract endpoints, secrets, directories, and sensitive URLs from any webpage.

JS Finder Pro is a professional JavaScript reconnaissance tool for security researchers, bug bounty hunters, and developers who need to quickly analyze what a webpage is exposing through its scripts. How it works: Click Scan on any webpage. The extension fetches every JavaScript file loaded on the page, scans inline scripts, and optionally follows linked scripts recursively (Deep Scan mode). Results are organized across four tabs: 🌐 Endpoints — URLs, API paths, WebSocket connections, and internal routes found in JavaScript. Sensitive paths such as admin panels, config routes, and internal APIs are flagged automatically. 🔑 Secrets — Detects accidentally exposed credentials and tokens across major cloud providers, payment processors, source control platforms, communication services, and databases. Secret values are blurred by default and revealed on click. 📁 Directories — Sensitive path references are extracted and ranked by risk level: critical, high, or medium. ⚡ JS Files — A full list of every JavaScript file loaded on the page, including files discovered during Deep Scan. Export findings as JSON or CSV for reporting, or copy to clipboard in one click. Who it's for: Bug bounty hunters doing recon on in-scope targets Penetration testers auditing web applications Developers checking their own apps for accidental secret exposure Security engineers reviewing third-party JavaScript for supply chain risk All scanning runs entirely in your browser. No data is sent to any external server.