jswzl

jswzl helps make web application testing easier with static analysis, making it easier to audit JS code and do your recon/mapping

[jswzl @WeaselJs]

jswzl 2025.2.1 is now out! 🥳

It contains a couple of bug fixes for the search feature.

See the release notes here: https://t.co/iUJNXt8PtE

[jswzl @WeaselJs]

jswzl 2025.1.2 is now out, with a BIG new feature in beta: Caido support! 🥳

It also adds support for the VS Code extension to open files larger than 50MB.

You can find the full patch notes here: https://t.co/iUJNXt8PtE

[jswzl @WeaselJs]

With 2025.1.1 released yesterday, it felt like a good time to review 2024 and all the improvements made to jswzl during the year. And a bit of a look ahead to what will come in 2025!

https://t.co/IYRySqs7DO

[jswzl @WeaselJs]

Our build system was apparently still recovering from New Year's, and the build for the 2025.1.1 server didn't contain the full set of changes, which broke some functionality😱

If you have already installed 2025.1.1, it's recommended that you go and re-download the server build

[jswzl @WeaselJs]

jswzl 2025.1.1 is now out! 🥳

- Big memory usage improvements.
- Requests can now be deleted.
- GraphQL Schema has some documentation.
- Bug fixes.

You can find the full release notes here: https://t.co/iUJNXt9njc

[m4ll0k @m4ll0k]

@intigriti I use several tools, like @WeaselJs for static analysis and my private version of AutoBreakPointer https://t.co/8Hn5XgBuhz

[jswzl @WeaselJs]

jswzl 2024.4.4 is out now! 🥳 Here are the highlights:

- Hide descriptors.
- Show URI for code in combined sources.
- Performance improvements.

You can find the full release notes here: https://t.co/iUJNXt8PtE

[jswzl @WeaselJs]

jswzl 2024.4.3 is now out! 🥳

It brings:
- Some significant performance improvements.
- Detection fixes and improvements.
- UI improvements.

For the full details, check out the release notes here: https://t.co/iUJNXt8PtE

[jswzl @WeaselJs]

jswzl 2024.4.2 is now out! 🥳

This release has several significant performance improvements, especially for Mac OS users.

For full details, see the release notes here:
https://t.co/iUJNXt8PtE

[jswzl @WeaselJs]

jswzl 2024.4.1 is now out! 🥳

- Performance improvements in the VS Code extension.
- Improvements to source unpacking.
- Improvements to secret detection.
- Lots of little bug fixes.

For the full details, check out the release notes here: https://t.co/iUJNXt8PtE

[jswzl @WeaselJs]

jswzl 2024.3.2 is now out! 🥳Here are the highlights:

- Ingest pipeline improved to detect packed chunks in in-line JavaScript
- Pre-fetched chunks are now tagged
- Detection of cryptographic material
- Bug fixes and performance improvements!

The full release notes can be found here: https://t.co/dFAoSUtLY4

[jswzl @WeaselJs]

Here is a little teaser for the next release of jswzl:

It'll be able to detect cryptographic material. 🥳

[jswzl @WeaselJs]

Impressive speed run of how to efficiently automate bug bounty hunting by @G0LDEN_infosec in 22 minutes 🔥#defcon32

[jswzl @WeaselJs]

So much recon goodness from @Jhaddix and @BadAt_Computers at the bug bounty village at #defcon32!

[jswzl @WeaselJs]

The #defcon32 bug bounty village is super busy! @CaidoIO

[jswzl @WeaselJs]

A lot of people have asked for quotes lately. This can all be done directly from the website. For instructions on how to do this, a guide has been made available: https://t.co/Bg7tpydey9

[jswzl @WeaselJs]

It's been a year since jswzl was released. 🥳

This blog post looks at the year gone by, the achievements and challenges faced, and looks ahead to year two.

https://t.co/sqAj2Ardbd

[jswzl @WeaselJs]

This is such wonderful advice that it inspired a whole blog post on the subject of manually reviewing JavaScript! Check it out!

https://t.co/3yIYS7Ork4

[Nathan Jones @njcve_]

BB Tips that no-one wants to hear #1.

You need to manually read that js file. Your automated tooling is missing things. I guarantee it.

[jswzl @WeaselJs]

Have you checked out the great talk by @0xLupin at #NahamCon2024, where he talks about how he used jswzl to help find cool bugs? If not, you should check it out! 🥳

https://t.co/wJY2b9EisG

[jswzl @WeaselJs]

@W1S3F0X If you buy directly from the website, it's $1000/user/year. I'm not sure what currency Saturn uses, but if you go to the "Buy" page, it'll show you the price in your local currency.

[jswzl @WeaselJs]

It's been a year now since the first release of jswzl. Time has flown! 🤯

It's amazing to hear from customers regularly about how jswzl has helped them find vulnerabilities more easily. And we now have paying customers in 16 countries! 🥳

I look forward to building on that in year two and making the tool even more effective for users.