The extension analyzes proxy responses and identifies in-scope scripts, then writes the contents to a temporary file and executes jsluice urls [...].

A limited number of coroutines are used to ensure moderate CPU usage. Findings are then displayed in a table in the BurpJsluice tab, which can be filtered via regex. All findings can be exported as CSV, copied to the clipboard, and sent to Repeater.

This has only been tested on Linux.

Screenshot

References

https://bishopfox.com/blog/power-pen-tests-with-montoya-api

https://github.com/PortSwigger/additional-cors-checks/

https://bishopfox.com/blog/jsluice-javascript-technical-deep-dive