KathanP19 / JSFScan.sh

Automation for javascript recon in bug bounty.
889 stars 163 forks source link

Help #18

Closed bootyhunt3r closed 3 years ago

bootyhunt3r commented 3 years ago

Hey man , Can you please look at the main script one more time, seems like there are a lot of errors , if you can just upgrade the script to like work correctly , cuz I have installed it in 3 different laptops and everytime it throws error , if you can just make it correct , this will be a dream tool. Thank you.

KathanP19 commented 3 years ago

Try using docker version

bootyhunt3r commented 3 years ago

Sure , I'll try out that.

the-maux commented 3 years ago

Hello guyz, @bootyhunt3r try this run, but install latest go before 😉 :

apt -y update && apt -y install git wget python3 python3-pip

# install python tools
git clone https://github.com/KathanP19/JSFScan.sh
git clone https://github.com/codingo/Interlace.git
git clone https://github.com/dark-warlord14/LinkFinder
git clone https://github.com/m4ll0k/SecretFinder.git

cat ./Interlace/requirements.txt > requirements.txt
cat ./SecretFinder/requirements.txt >> requirements.txt
cat ./LinkFinder/requirements.txt >> requirements.txt
pip3 install -r requirements.txt
cd Interlace && python3 ./setup.py install
cd LinkFinder && python3 ./setup.py install
cd ../JSFScan.sh

# install go tools
go get github.com/tomnomnom/waybackurls
GO111MODULE=on go get -v github.com/lc/gau
GO111MODULE=on go get -v github.com/lc/subjs
GO111MODULE=on go get -v github.com/projectdiscovery/httpx/cmd/httpx
GO111MODULE=on go get -v github.com/hakluke/hakrawler

Maybe this can help, more info here

bootyhunt3r commented 3 years ago

Bro , the docker version is also not working , i tried using that , I just want the endpoints from the js files from the subdomains , do you have another alternative to just get the endpoints ?

KathanP19 commented 3 years ago

Do this steps

  1. Run install.sh as sudo
  2. Send screenshots of error
bootyhunt3r commented 3 years ago

I did , I installed tools manually too , the process is running and taking a couple of mins to complete but then when I am opening that folder the endpoint file empty and some other files are also empty

KathanP19 commented 3 years ago

screenshots please with the full command you used and results

Davishankar commented 3 years ago

Hey Kathan, I think I am getting a similar error as @bootyhunt3r. I will share my screenshots. So I installed it on an ubuntu vps. Followed the instructions for install.sh as mentioned on github. Now when writing the command this is what I am getting image image

Davishankar commented 3 years ago

Also, receiving the same error in Docker as well

KathanP19 commented 3 years ago

@Davishankar its --all not -all

Davishankar commented 3 years ago

Hi @KathanP19 sorry that was a typing error. But i tried the command with the correct syntax as well, still not getting any output .

KathanP19 commented 3 years ago

Can you share command you use and error you got, also share screenshot if possible.

Davishankar commented 3 years ago

The command and the error is attached below. There is some problem when it is interacting with Interlace if I am not wrong.

image

image

Davishankar commented 3 years ago

@KathanP19

KathanP19 commented 3 years ago

@Davishankar read the error it says no target or empty list that means the list you provided is empty or there is no available js file to scan. Closing this issue as it's not the error in the tool, create a new issue if there is a problem in the tool, Thank you.