API Leaks

Porch Pirate

GitHub - MandConsultingGroup/porch-pirate: Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.GitHub

Swagger Spy

GitHub - UndeadSec/SwaggerSpy: Automated OSINT on SwaggerHubGitHub