lc/subjs

Fetches javascript file from a list of URLS or subdomains.

863

stars

commits

primary language

Jul 22, 2025

updated

README

subjs

subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more.

It's recommended to pair this with gau and then https://github.com/GerbenJavado/LinkFinder

Resources

Usage
Installation

Usage:

Examples:

$ cat urls.txt | subjs 
$ subjs -i urls.txt
$ cat hosts.txt | gau | subjs

To display the help for the tool use the -h flag:

$ subjs -h

Flag	Description	Example
`-c`	Number of concurrent workers	`subjs -c 40`
`-i`	Input file containing URLS	`subjs -i urls.txt`
`-t`	Timeout (in seconds) for http client (default 15)	`subjs -t 20`
`-ua`	User-Agent to send in requests	`subjs -ua "Chrome..."`
`-version`	Show version number	`subjs -version"`

Installation

From Source:

$ GO111MODULE=on go get -u -v github.com/lc/subjs@latest

From Binary

You can download the pre-built binaries from the releases page and then move them into your $PATH.

$ tar xvf subjs_1.0.0_linux_amd64.tar.gz
$ mv subjs /usr/bin/subjs

Useful?

Contributors

virenpawar

11 commits

pwnbyte

5 commits

LemonIceStuff

1 commits

Similar repos

lc/gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

5,081

same org

BishopFox/jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

1,919

GerbenJavado/LinkFinder

A python script that finds endpoints in JavaScript files

4,443

edoardottt/csprecon

Discover new target domains using Content Security Policy

526

denandz/sourcemapper

Extract JavaScript source trees from Sourcemap files

1,453

CapacitorSet/box-js

A tool for studying JavaScript malware.

674

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

14,410

projectdiscovery/katana

A next-generation crawling and spidering framework.

17,467

Languages

100.0%