loading
Loading content
loading
Discovery
A minimal JavaScript endpoint extractor for HTML and embedded scripts.
overview
golinkfinder pulls endpoints out of a single web page. It reads the HTML source and the JavaScript embedded in or linked from it, then extracts the paths, API routes, and URLs hiding inside. Modern apps define much of their routing in script, so it recovers links a crawler that only follows anchor tags never sees.
It is deliberately minimal: hand it one URL and it returns the endpoints it found, with no scoping flags or crawl depth to tune. That makes it a fast step to drop into a pipeline, the node that turns one live page into a list of paths worth probing, and it earns its keep on single-page apps where the interesting routes live in bundled JavaScript.
Written in Go as a faster take on the original Python LinkFinder, it runs as a Discovery node that takes a URL and writes a file and a folder of extracted endpoints. Reach for it after a prober confirms a page is live, then send its output into content discovery or a vulnerability scanner.
use cases
Point golinkfinder at a page to recover API routes and links defined in script that an anchor-following crawler would never reach.
Extract the paths bundled into a SPA's JavaScript so the rest of the workflow probes real endpoints instead of only the visible navigation.
Hand the extracted endpoints to httpx or a scanner so probing runs against paths pulled straight from the page's own code.
Bug hunters and red teamers point it at one live URL to surface a starting map of paths before committing to deeper crawling or fuzzing.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| domain | STRING | --domain | The target URL to extract endpoints from its HTML and embedded JavaScript. |
Showing key inputs. golinkfinder exposes 1 inputs in total.
example
# extract endpoints from a live page's HTML and JavaScriptGoLinkFinder -d https://example.com -o endpoints.txthttps://example.com/api/v1/usershttps://example.com/api/v1/auth/session/static/js/app.4f2a1c.js/static/js/vendor.bundle.js/api/v2/search?q=/api/v1/orders/12873https://cdn.example.com/config.json/account/settingsguidance
Use golinkfinder when you have a live URL and want the endpoints buried in its HTML and JavaScript. It is minimal and single-shot, so for crawling many pages or deeper JS parsing reach for katana or a dedicated link finder.
The Python original; extracts endpoints from JavaScript files with regex patterns.
Fetches the JavaScript files a page references, which you can then mine for endpoints.
Full crawler with JavaScript awareness; covers many pages where golinkfinder handles one.
faq
related
Check whether a URL redirects to a masked 404 page.
Append lines to a file only if they are not already there.
Extract URLs and endpoints from Android APK files.
Visual inspection of websites across a large number of hosts.
Find suspicious files across a large set of AWS S3 buckets.
An automated tool that checks for backup artifacts that may disclose a web application's source code.
A target URL feeds golinkfinder, which extracts endpoints from its HTML and JavaScript and passes them to httpx so only live ones land as output.
Facts on this page come from the live Trickest tool library.