…or drag a recording or script anywhere onto this page.
Session ids, CSRF tokens and generated identifiers are only valid for the run that issued them. This finds them and says where they are.
Convert or analyse a whole directory of scripts and see, per file, what came across and what needs a human.
Analyse a recording above, then drop in the JMX those requests belong to. The extractors are inserted into your own file — nothing else in it is touched.
Open DevTools → Network before converting. After the page and the
.wasm module load, converting issues no further requests —
the file is read locally by JavaScript and processed in WebAssembly.