JS Recon

JS Recon is a command-line tool that crawls, maps, and analyzes JavaScript bundles to uncover hidden endpoints, hardcoded secrets, and vulnerable code patterns without requiring source access. It supports modern frameworks including React, Next.js, Vue, Svelte, Angular, and Nuxt, automatically handling dynamically-loaded chunks that standard tools miss.

Designed for security researchers and penetration testers, JS Recon runs a five-stage pipeline: fetching JavaScript files, extracting strings and paths, indexing functions and relationships, analyzing for vulnerabilities, and generating structured reports. It integrates into CI/CD workflows via GitHub Actions and GitLab CI, and supports proxy rotation for testing behind firewalls.