https://souljian.cn/tags/js%E7%88%AC%E5%8F%96/Recent content in JS爬取 on SoulJian小站Hugo -- gohugo.ioen-usSun, 30 Aug 2026 10:00:00 +0800https://souljian.cn/p/751088219/Sat, 29 Aug 2026 14:00:00 +0800https://souljian.cn/p/751088219/<h2 id="写在前面合法学习边界">写在前面：合法学习边界 </h2><p>信息收集只在授权测试环境进行。</p> <h2 id="一google-hacking-语法">一、Google Hacking 语法 </h2><img src="https://souljian.cn/img/subfinder-flow.svg" alt="Google Hacking" /> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">site: · filetype: · inurl: · intitle: · ext: </span></span></code></pre></td></tr></table> </div> </div><h2 id="二常用语法">二、常用语法 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">site:target.com filetype:pdf </span></span><span class="line"><span class="cl">site:target.com inurl:admin </span></span><span class="line"><span class="cl">site:target.com ext:log </span></span><span class="line"><span class="cl">inurl:phpinfo() intitle:phpinfo </span></span></code></pre></td></tr></table> </div> </div><h2 id="三js-爬取">三、JS 爬取 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1"># 从 JS 文件提取 API 路径</span> </span></span><span class="line"><span class="cl">cat bundle.js <span class="p">|</span> grep -oE <span class="s1">&#39;api/[a-zA-Z0-9_/-]+&#39;</span> <span class="p">|</span> sort -u </span></span></code></pre></td></tr></table> </div> </div><h2 id="四小结">四、小结 </h2><p>Google Hacking + JS 爬取 + 云资产发现 = 高级信息收集三件套。</p>