w9w / jsa Goto Github PK
View Code? Open in Web Editor NEWJavascript security analysis (JSA) is a program for javascript analysis during web application security assessment.
License: GNU General Public License v3.0
Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.
License: GNU General Public License v3.0
`Traceback (most recent call last):
File "/usr/local/lib/python3.6/dist-packages/urllib3/connectionpool.py", line 667, in urlopen
self._prepare_proxy(conn)
File "/usr/local/lib/python3.6/dist-packages/urllib3/connectionpool.py", line 930, in _prepare_proxy
conn.connect()
File "/usr/local/lib/python3.6/dist-packages/urllib3/connection.py", line 316, in connect
self._tunnel()
File "/usr/lib/python3.6/http/client.py", line 935, in _tunnel
message.strip()))
OSError: Tunnel connection failed: 503 Forwarding failure
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/local/lib/python3.6/dist-packages/requests/adapters.py", line 449, in send
timeout=timeout
File "/usr/local/lib/python3.6/dist-packages/urllib3/connectionpool.py", line 725, in urlopen
method, url, error=e, _pool=self, _stacktrace=sys.exc_info()[2]
File "/usr/local/lib/python3.6/dist-packages/urllib3/util/retry.py", line 439, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='***', port=443): Max retries exceeded with url: **** (Caused by ProxyError('Cannot connect to proxy.', OSError('Tunnel connection failed: 503 Forwarding failure',)))
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/bb/tools/JSA/jsa.py", line 144, in
main_func(original_lines, js_files_2nd_lvl, all_endpoints_1st_lvl)
File "/bb/tools/JSA/jsa.py", line 90, in main_func
js_file_status = requests.get(line, verify=False).status_code ## finding out a status code of js file url
File "/usr/local/lib/python3.6/dist-packages/requests/api.py", line 76, in get
return request('get', url, params=params, **kwargs)
File "/usr/local/lib/python3.6/dist-packages/requests/api.py", line 61, in request
return session.request(method=method, url=url, **kwargs)
File "/usr/local/lib/python3.6/dist-packages/requests/sessions.py", line 530, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python3.6/dist-packages/requests/sessions.py", line 643, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python3.6/dist-packages/requests/adapters.py", line 510, in send
raise ProxyError(e, request=request)
requests.exceptions.ProxyError: HTTPSConnectionPool(host='*******', port=443): Max retries exceeded with url: **** (Caused by ProxyError('Cannot connect to proxy.', OSError('Tunnel connection failed: 503 Forwarding failure',)))`
and exit from script execution :(
hy
i have facing problem in installation
when i used command echo " https://example.com/" | subjs | python3 jsa.py then its not work
and use only python3 jsa.py then its work but not 1st level 2nd level normal page identifier not js file
i tried install automation so i did all the things but when you said use your github api to .token so i can't understand how to do that so my ,/automation.sh is also not working
so please make a video how to install
How is it find credentials, secrets, emails, password, ...etc ?
it is just give me the endpoints no more
There's several changes on gau and hakrawler options, So it needs update on automation.sh script
Hi there,
Thanks for creating a wonderful tool for automating this tasks.
While I run jsa.py, I am getting this error :
Traceback (most recent call last):
File "/usr/sbin/jsa.py", line 11, in <module>
from tld_detection import tld_detection
ModuleNotFoundError: No module named 'tld_detection'
So I tried to I install the 'tld_detection' module, but that was also failed:
pip3 install tld_detection -v
Created temporary directory: /tmp/pip-ephem-wheel-cache-86glbg7_
Created temporary directory: /tmp/pip-req-tracker-oucuturg
Created requirements tracker '/tmp/pip-req-tracker-oucuturg'
Created temporary directory: /tmp/pip-install-o9bb2xnc
Collecting tld_detection
1 location(s) to search for versions of tld-detection:
* https://pypi.org/simple/tld-detection/
Getting page https://pypi.org/simple/tld-detection/
Looking up "https://pypi.org/simple/tld-detection/" in the cache
No cache entry available
Starting new HTTPS connection (1): pypi.org:443
https://pypi.org:443 "GET /simple/tld-detection/ HTTP/1.1" 404 13
Status code 404 not in [200, 203, 300, 301]
Could not install packages due to an EnvironmentError.
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/pip/_internal/commands/install.py", line 338, in run
resolver.resolve(requirement_set)
File "/usr/lib/python3/dist-packages/pip/_internal/resolve.py", line 102, in resolve
self._resolve_one(requirement_set, req)
File "/usr/lib/python3/dist-packages/pip/_internal/resolve.py", line 256, in _resolve_one
abstract_dist = self._get_abstract_dist_for(req_to_install)
File "/usr/lib/python3/dist-packages/pip/_internal/resolve.py", line 209, in _get_abstract_dist_for
self.require_hashes
File "/usr/lib/python3/dist-packages/pip/_internal/operations/prepare.py", line 218, in prepare_linked_requirement
req.populate_link(finder, upgrade_allowed, require_hashes)
File "/usr/lib/python3/dist-packages/pip/_internal/req/req_install.py", line 164, in populate_link
self.link = finder.find_requirement(self, upgrade)
File "/usr/lib/python3/dist-packages/pip/_internal/index.py", line 572, in find_requirement
all_candidates = self.find_all_candidates(req.name)
File "/usr/lib/python3/dist-packages/pip/_internal/index.py", line 530, in find_all_candidates
for page in self._get_pages(url_locations, project_name):
File "/usr/lib/python3/dist-packages/pip/_internal/index.py", line 675, in _get_pages
page = self._get_page(location)
File "/usr/lib/python3/dist-packages/pip/_internal/index.py", line 793, in _get_page
return _get_html_page(link, session=self.session)
File "/usr/lib/python3/dist-packages/pip/_internal/index.py", line 147, in _get_html_page
resp.raise_for_status()
File "/usr/share/python-wheels/requests-2.21.0-py2.py3-none-any.whl/requests/models.py", line 940, in raise_for_status
raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 404 Client Error: Not Found for url: https://pypi.org/simple/tld-detection/
Looks like the module is not available now!
Thanks for your time ;)
Looks like the tldextract
python module was not covered in the bash installation file which causes this error when initiating the automation:
Searching for URLs in GH..
Traceback (most recent call last):
File "github-endpoints.py", line 234, in <module>
import tldextract
ModuleNotFoundError: No module named 'tldextract'
I believe the following PR #3 should fix it.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.