w3av

Extract URLs, strings, and more from JavaScript code using tree-sitter.

Moved to https://pypi.org/project/sawari

Features

• URLs Mode - Extract API endpoints, URLs, and paths with intelligent variable resolution
• Strings Mode - Extract all string literals and template strings
• Tree Mode - Visualize Abstract Syntax Tree structure
• Inspect Mode - Discover node types and code patterns
• Query Mode - Custom tree-sitter queries for pattern matching

Installation

w3av requires at least Python 3.11

pip install w3av

Usage

Read more in the documentation

Extract URLs and API endpoints

w3av urls app.js --include-templates
w3av urls bundle.js --context '{"API_URL":"https://api.example.com"}'

Find potential secrets

w3av strings app.js --min 20 | grep -i "key\|token\|secret"

Visualize code structure

w3av tree app.js --only-named

Custom pattern matching

w3av query app.js --query '(function_declaration name: (identifier) @name)'

Related Tools

• LinkFinder
• jsluice

License

MIT