API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs
-
Updated
Apr 30, 2026 - Go
API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs
EndpointHunter is a powerful bug bounty tool designed to hunt and extract API endpoints, LFI paths, secrets, and cloud storage URLs from JS, CSS, and HTML files. It's built for efficiency, supporting multi-threaded scanning and seamless integration with other popular recon tools.
Add a description, image, and links to the api-enumeration topic page so that developers can more easily learn about it.
To associate your repository with the api-enumeration topic, visit your repo's landing page and select "manage topics."