Skip to content

aristosMiliaressis/js-analysis-tools

Repository files navigation

bash_functions.sh contains some functions that help you extract the sites js/html content from a HAR file & unminify it, also contains a function to extract any source maps if present.
Intended Workflow:

  • open devtools
  • check "Preserve Log" & "Disable Cache" in network tab
  • crawl the site manually
  • hit the "Export HAR" button when done crawling
  • than run the unhar function like this unhar www.redacted.com.har
  • if there are sourcemaps also run srcmap www.redacted.com.har
  • Go to the Dev Tools > Sources > Override and add the extracted folder from the HAR file
  • Now refresh the page with Dev Tools open and all your dynamic analysis tools will report unminified stacktraces.

Dependencies:

go install github.com/tomnomnom/unfurl@latest
npm install -g js-beutify
npm install -g html-beutify
go install github.com/denandz/sourcemapper@latest

postMessage-tracker this is Frans Rosen's extension with a few changes, original here.
Changes:

  • Logs message content (not just message handlers) to webhook
  • Filters postMessage handlers registered by extensions
  • Filters postMessages in the console coming from the following extensions
    • DOMInvador
    • DOMLogger++
    • Wappalyzer
    • UntrustedTypes
  • syntax highlighting
  • removes stacktrace lines that come from stack frames of this extension

hashChange-tracker just a rip off of postMessage-tracker but for hashchange event


dom-tracker tracks several potentially interesting elements like iframes, any element with a target attribute and any element with a path relative uri, also detects quirks mode and supports sending localStorage, sessionStorage, cookies & full DOM to a webhook.

About

A collection of js analysis tools & scripts.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published