+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Get all endpoints of API (/showthread.php?tid=5976624)
Get all endpoints of API - iNuke - Jun 4, 2019
Hey there,
Sorry if it's a noob question, but is there a way to get access to all endpoints of an API?
For example, let's say: gucci.com/api/products/666666 returns a json file containing info about product number 666666, is there a way to find all other routes/endpoints?
Thank you!
RE: Get all endpoints of API - cash0me - Jun 4, 2019
all API are different from each other. so no standard/style/shit for the routes/endpoints. the only way its to start looking at the http request of every page so you can scrap more of their routes.
RE: Get all endpoints of API - iNuke - Jun 4, 2019
(Jun 4, 2019 12:24 PM)m0neyhunter Wrote: all API are different from each other. so no standard/style/shit for the routes/endpoints. the only way its to start looking at the http request of every page so you can scrap more of their routes.
Thanks for the reply mate.
Been trying that but didn't get any luck :( Maybe I'm doing it wrong though
RE: Get all endpoints of API - cash0me - Jun 4, 2019
Hit me with the link ;) I need to see so I can help you more.
RE: Get all endpoints of API - iNuke - Jun 4, 2019
(Jun 4, 2019 12:47 PM)m0neyhunter Wrote: Hit me with the link ;) I need to see so I can help you more.
PMed you mate ;)
RE: Get all endpoints of API - Felix - Jun 5, 2019
There are multiple tools available on github that can help you accomplish this - check out parameth and arjun.
RE: Get all endpoints of API - Louis - Jun 5, 2019
(Jun 5, 2019 06:45 PM)Felix Wrote: There are multiple tools available on github that can help you accomplish this - check out parameth and arjun.
These are very useful especially Arjun, but i don't think these are what he's looking for try finding docs a lot of them are behind passwords but you can just brute them.
RE: Get all endpoints of API - Elitas - Jun 6, 2019
There are also some wordlists you could try with burp intruder. Most APIs have pretty obvious routes, with obvious words, and the intruder will pick up on those that work.