Tips on enumerating unknown APIs in my environment?

• SecLists

  177 53,546 9.6 PHP

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

• ffuf

  17 11,382 6.1 Go

  Fast web fuzzer written in Go

  

Also, I see you mentioned using curl. You can checkout ffuf which is closely related but more geared towards what you're doing.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• kubeshark

  16 10,541 9.5 Go

  The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes

  

For example, this open-source project gives instant visibility into API traffic in kubernetes environments: https://github.com/kubeshark/kubeshark

Suggest a related project