reddit hackernews mail facebook facebook linkedin
Aranea

Aranea

OSINT tool used for web crawling or examining JavaScript files for likely useful data.

The assessment generally starts with different recon steps, like scanning, URL crawling, fuzzing, and so on. In some cases, however, such as the testing of SPA applications, regular URL-crawling seems to be pretty meaningless, and fuzzing may not be "tester-friendly".
This simple tool provides information about the app by parsing the JavaScript files and extracting API endpoints or other probably useful strings.
It can also be used as a regular URL crawler.