xtraktor

Description

This is a simple tool that scans JS files from web-page and tries to extract additional endpoints from it.

Dependencies

Currently there are two dependencies:

• puppeteer
• node-fetch

I've opted using puppeteer since it allows me to also scan SPAs.

How to install

Make sure you have node.js, npm and git installed in your system, then do this:

git clone https://github.com/downitch/xtraktor.git
cd xtraktor
npm install

Or a one-liner:

git clone https://github.com/downitch/xtraktor.git && cd xtraktor && npm install

How to use

node index.js -l "domain.name" -c "cookies..." -u "user-agent" -H "headers" -H ...

Current version only supports one domain name, one set of cookies and one user-agent. Cookies are passed in a following form:

name=value; name1=value1; ...

There is a config.js file that contains some constants and output directory, you can mess with it if you like :)

TODO

• multithreading
• dummy mode (headless)
• recursive crawl
• fail-safe mechanisms