nuclei-templates/file/js/js-analyse.yaml

id: js-analyse
info:
  name: js-analyse
  author: ayadim
  severity: low
  tags: file,js-analyse,js

file:
  - extensions:
      - js
    extractors:
      - type: regex
        name: Extracted-Token
        regex:
          - "(?i)(([a-z0-9]+)[-|_])?(key|password|passwd|pass|pwd|private|credential|auth|cred|creds|secret|access|token)([-|_][a-z]+)?(\\s)*(:|=)+"    
      - type: regex
        name: Extracted-Varaibles-Name
        regex:
          #since go does not support lookahead in regex it hard to return only the names :/
          - "(?i)(var|const|let)\\s+([a-z_$][0-9a-z_$]*)\\s*="
      - type: regex
        name: Extracted-Endpoints
        regex:
          - "(?i)('|\")((\\.{0,2})|([a-z0-9-_]*))/([a-z0-9-_/=:&?\\.]+)('|\")"
          - "(?i)}\\s*/[a-z0-9-_?=&/]+"
          - "(?i)path\\s*(:|=)\\s*('|\")[a-z0-9-_?=&:\\./]+('|\")"
      - type: regex
        name: Extracted-URI
        regex:
          - "(?i)([a-z]{0,10}):(//|/)[a-z0-9\\./?&-_=:]+"