JSReconduit is a tool designed for passive JavaScript reconnaissance. It helps penetration testers bridge Burp Suite traffic into a structured, AST-based analysis within Visual Studio Code (VSCode). With JSReconduit, you can easily analyze web applications and enhance your security investigations.
Before you begin, make sure your system meets the following requirements:
Visit the Releases Page
Go to the Releases Page.
Download the Latest Version
Look for the latest version available. Click on the link to download the installer file suitable for your operating system.
Run the Installer
Once the download is complete, locate the file in your downloads folder. Open the file to start the installation process. Follow the prompts on your screen to finish the installation.
Open Visual Studio Code
Once installed, launch VSCode.
Install JSReconduit Extension
In VSCode, navigate to the Extensions view by clicking on the Extensions icon in the Activity Bar on the side. Search for βJSReconduitβ and click install.
Configure the Extension
After installation, you may need to configure JSReconduit with your Burp Suite settings. Refer to the JSReconduit documentation for specific configuration settings.
To begin using JSReconduit, follow these steps:
Launch Burp Suite
Start by opening Burp Suite. Ensure your browser is configured to use Burp.
Capture Traffic
Use Burp to capture traffic from the web application you are analyzing.
Send Data to JSReconduit
In Burp, find the option to send captured traffic to JSReconduit. This allows the application to analyze the JavaScript.
View Results in VSCode
Switch to VSCode to view the structured analysis produced by JSReconduit. Here, you can explore the JavaScript AST (Abstract Syntax Tree) representation.
JSReconduit offers several key features:
If you encounter any issues or need assistance, you can contact our support team or check the community pages. You can also revisit the Releases Page for updates or new releases.