api-recon-and-docs

What problem does it solve?

Provide a focused playbook to discover API endpoints, documentation, schemas, versions, and hidden surface area so security testers can comprehensively map an API before exploitation or authorized assessment.

Core Features & Use Cases

• Endpoint discovery: Techniques to mine client-side JavaScript and common documentation paths to enumerate reachable API entrypoints.
• Schema and docs extraction: Guidance for locating OpenAPI/Swagger files, GraphQL schemas, and extracting optional or undocumented fields useful for testing.
• Version and drift detection: Identifies legacy, mobile, and versioned routes that may expose deprecated or overlooked functionality.
• Use Case: Ideal for bug bounty hunters and penetration testers performing reconnaissance to prioritize testing, identify auth gaps, and route to specialized attacks.

Quick Start

Run API reconnaissance against https://target to enumerate endpoints, fetch openapi.json or swagger.json, extract schema hints, and surface undocumented parameters.