🛡️ SainiON Hacks – JS Recon & Secret Scanner

A powerful all-in-one GUI reconnaissance tool for Bug Bounty Hunters and Pentesters.
This tool automates JavaScript recon by pulling historical JS files from the Wayback Machine, scanning them for hardcoded secrets, and extracting hidden endpoints.

Developed by: SainiON Hacks
📺 YouTube: https://www.youtube.com/@SainiONHacks

• Wayback Machine (CDX API) integration
• Smart URL filtering using URO
• 900+ regex-based secret patterns
• Shannon Entropy false-positive reduction
• Endpoint extraction & auto-resolution
• Tkinter-based professional GUI
• HTML report export

git clone https://github.com/SainiONHacks/Secret_Hunter.git
cd Secret_Hunter

Exe and linux

Windows
Linux

1. Enter target domain
2. Enable URO
3. Click Start Recon
4. Analyze Secrets & Endpoints
5. Export HTML report

Secrets are defined in custom_secrets.json

[
  {
    "name": "Google API Key",
    "pattern": "AIza[0-9A-Za-z\-_]{35}",
    "severity": "medium"
  }
]

Educational and authorized testing only.
You are responsible for legal usage.

YouTube: https://www.youtube.com/@SainiONHacks