skills.rest
bingook
bingookCOMMUNITY
Explore all skills by this author →
GitHub

api-recon-and-docs

Automates API reconnaissance by analyzing JavaScript files, documentation paths, and versioning schemes.

Updated Aug 23, 2026
Search Tags:#documentation#api#reconnaissance#endpoint discovery#schema extraction
One-click install
npx skills add https://github.com/bingook/bingo --skill api-recon-and-docs-bingook
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-recon-and-docs
Source: https://github.com/bingook/bingo/tree/main/bingo/skills/hack-skills/api-recon-and-docs
Command: npx skills add https://github.com/bingook/bingo --skill api-recon-and-docs-bingook

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the discovery of API endpoints, documentation, and schema information, streamlining the reconnaissance phase for API testing.

Core Features & Use Cases

  • API Endpoint Discovery: Enumerate all reachable API entrypoints.
  • Schema Extraction: Retrieve schemas, optional fields, and role differences.
  • Version Identification: Identify old versions and mobile paths.
  • Documentation Review: Surface hidden API documentation and parameters.
  • Use Case: Before exploiting an API, use this Skill to understand its structure and potential vulnerabilities.

Quick Start

Use the api-recon-and-docs skill to enumerate API endpoints for the target API.

Frequently Asked Questions about api-recon-and-docs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate API endpoint discovery from JavaScript files?▼

API endpoint discovery is automated by analyzing client-side JavaScript files and common documentation paths. This process enumerates all reachable REST, mobile, and GraphQL API entrypoints for your target.

What is API reconnaissance and why is it needed before testing?▼

API reconnaissance is the process of discovering endpoints, schemas, and documentation. It is needed to understand the API's structure, versioning schemes, and potential vulnerabilities before exploitation.

Can I extract API schemas and identify old versions automatically?▼

Yes, you can extract API schemas to retrieve optional fields and role differences. The analysis also identifies old versions and mobile paths by examining server-side endpoints and versioning schemes.

Does this API reconnaissance approach work with GraphQL and REST APIs?▼

Yes, this API reconnaissance approach works with REST, mobile, and GraphQL APIs. It focuses on analyzing both client-side files and server-side endpoints to map the complete API structure.

What's the best way to find hidden API documentation and parameters?▼

The best way to find hidden API documentation is by analyzing common documentation paths and client-side files. This surfaces hidden parameters and schema information for the target API.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

recon-js-analysis

Extract API endpoints, routing tables, and environment configurations from client-side JavaScript bundles.

Community
Advanced
HouseofmvpsHouseofmvps
115

pentest

Scan web apps, APIs, and codebases for verified exploitable vulnerabilities.

Community
Advanced
congiuluccongiuluc

logging-angular

Capture and ship structured Angular client-side logs to a backend endpoint.

Community
Advanced
YlikenYliken
5

api-recon-and-docs

Discover reachable API endpoints, schemas, and documentation across REST, GraphQL, and mobile APIs.

Community
Intermediate