BurpJSReconRadar

JSReconRadar A comprehensive Burp Suite extension for passive reconnaissance of JavaScript files. Detects secrets, API keys, endpoints, sensitive data, and security misconfigurations in HTTP responses in real-time. Works on both Burp Suite Community and Professional editions. Features Detection (1,600+ patterns) Category Examples Severity ---------- ---------- ---------- API Keys & Tokens AWS, GCP, Azure, Stripe, GitHub, GitLab, Slack, Twilio, SendGrid, Shopify, Firebase, Discord, Telegram, Mapbox, and 30+ more services HIGH AI API Keys OpenAI, Anthropic, Groq, Replicate, HuggingFace, Cohere, Mistral, Deepseek, Together AI, LangSmith, Pinecone, Voyage AI HIGH Private Keys & Credentials RSA/DSA/EC/PGP private keys, HTTP Basic Auth, Bearer tokens, JWTs, hardcoded passwords CRITICAL Database Connection Strings Redis, MongoDB, PostgreSQL, MySQL, AMQP URIs with credentials CRITICAL JS Config Secrets key:"value" patterns in JS objects, escaped JSON-in-JS (\"key\":\"value\"), DSN configs, connection strings CRITICAL/HIGH API Endpoints /api/, /rest/, /graphql, /auth/, /admin/, /internal/, /debug/, /login, /logout, /token, /webhook, /ws/, and more INFO