Tips on enumerating unknown APIs in my environment?

• SecLists

  182 58,946 9.9 PHP

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• ffuf

  19 12,776 4.8 Go

  Fast web fuzzer written in Go

  

  Also, I see you mentioned using curl. You can checkout ffuf which is closely related but more geared towards what you're doing.

• kubeshark

  17 11,079 9.4 Go

  The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes

  

  For example, this open-source project gives instant visibility into API traffic in kubernetes environments: https://github.com/kubeshark/kubeshark

Suggest a related project