Daily Writeups
3.61K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
Forwarded from Bug Bounty Diary
Unhar - Extract, Unminify, Beautify Javascript files from .Har file

In the previous post, I explained my approach to capturing and downloading a website’s JavaScript resources into a .HAR file for further local analysis. Now, let’s take it a step further with unhar and process that HAR files.

unhar turns a raw .HAR file into a structured set of web assets for local analysis. It extracts unique JavaScript and HTML resources while preserving the original URL structure, fetches available source maps, beautifies/unminifies JavaScript, and extracts inline scripts from HTML pages.

In short: HAR → Extract → Source Maps → Beautify → Ready for Analysis

Installation
git clone https://github.com/Spix0r/unhar
cd unhar


Usage
# custom output directory
python3 unhar.py site.har --output folder

# skip source map fetching
python3 unhar.py site.har --no-srcmap

# skip beautify
python3 unhar.py site.har --no-beautify


Repository: Github

#bugbounty #javascript #recon
© t.iss.one/BugBounty_Diary