Hello World
Whoami
Pentest
Cloud
Antivirus Evasion - Defender
EDR BYPASS
Red Team
CTF

Powered by GitBook

On this page

Fuzzing
API endpoints
Known API
API Detector
Kiterunner
GraphQL endpoint

Was this helpful?

API Discovery

PreviousChecklist NextSensitive Data (API Key, JWT token, etc.) Exposed

Last updated 3 hours ago

Fuzzing

API endpoints

Known API

API Detector

Kiterunner

GraphQL endpoint

API Fuzzing ListsSquareSec - Cybersecurity Courses

Bug-Bounty-Wordlists/api.txt at main · Karanxa/Bug-Bounty-WordlistsGitHub

SecLists/api-endpoints.txt at master · danielmiessler/SecListsGitHub

SecLists/common-api-endpoints-mazen160.txt at master · danielmiessler/SecListsGitHub

Index of /data/automated/

https://raw.githubusercontent.com/coffinxp/payloads/refs/heads/main/api.txt

GitHub - brinhosa/apidetector: APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.GitHub

GitHub - assetnote/kiterunner: Contextual Content Discovery ToolGitHub

KiteRunner - Hacker Tools: Next-level API hacking 👩‍💻Intigriti

API Discovery with Kiterunner - TCM SecurityTCM Security - Penetration Testing & Consulting

GitHub - Escape-Technologies/graphinder: 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️GitHub