endpoint-discovery

Endpoint discovery identifies all accessible URLs and hidden paths to map a web application's attack surface. This skill orchestrates Katana, Gospider, and GAU to crawl modern web apps and aggregate a comprehensive endpoint inventory.

Collecting historical URLs for security reconnaissance is done using GAU alongside active crawlers. This approach gathers historical web paths and dynamic routes, assembling a ready-to-use endpoint inventory for pre-deployment security assessments and pentesting.

Yes, you can use Katana and Gospider together for endpoint enumeration. This skill coordinates multi-tool crawls with scope controls, applying them simultaneously to discover hidden parameters and forms across the target web application.

Endpoint discovery works effectively for API surface validation before deployment. By enumerating all reachable endpoints and dynamic routes, it helps developers and security testers assess attack surfaces and validate exposed APIs.

To scope web crawling and prevent scope creep during endpoint mapping, this skill applies coordinated scope controls across Katana, Gospider, and GAU. This ensures crawls remain restricted to the target web application while aggregating endpoint output.