Burpsuite Extender plugin (Montoya version) that finds passively hidden endpoints and urls within any downloaded JavaScript file while browsing a website.
Based on previous Perl Script: https://github.com/defensahacker/URLSUCKER
make
Add dist/js-urlsucker-montoya.jar in Burpsuite Professional with Extensions -> Add, browse the previously js-urlsucker-montoya.jar compiled file and select. Done. There will appear a new tab called "URLSucker" where you can see the results.
(c) 2025 Defensahacker Labs