From e0d769815bb7dbc46ae0a2ee40f10362f9326968 Mon Sep 17 00:00:00 2001 From: Robotshell <51330800+robotshell@users.noreply.github.com> Date: Wed, 8 Sep 2021 10:43:43 +0200 Subject: [PATCH] Update magicrecon.sh --- magicrecon.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/magicrecon.sh b/magicrecon.sh index 1c5f3b0..79ffb97 100755 --- a/magicrecon.sh +++ b/magicrecon.sh @@ -241,7 +241,7 @@ vulnerabilities(){ printf "${NORMAL}${CYAN}Obtaining all the JavaScript files of the domain ...${NORMAL}\n\n" gau $domain |grep -iE '\.js'|grep -iEv '(\.jsp|\.json)' | tee js.txt printf "${NORMAL}${CYAN}Discovering sensitive data like apikeys, accesstoken, authorizations, jwt, etc in JavaScript files...${NORMAL}\n\n" - python3 ~/tools/secretfinder/SecretFinder.py --input js.txt -o cli | tee secrefinder.txt + python3 ~/tools/SecretFinder/SecretFinder.py --input js.txt -o cli | tee secrefinder.txt printf "\n" printf "${NORMAL}${CYAN}Searching enpoints in JS files...${NORMAL}\n\n" cat js.txt | grep -aoP "(?<=(\"|\'|\`))\/[a-zA-Z0-9_?&=\/\-\#\.]*(?=(\"|\'|\`))" | sort -u | tee endpoints.txt