[iNuke]

Hey there,

Sorry if it's a noob question, but is there a way to get access to all endpoints of an API?

For example, let's say: gucci.com/api/products/666666 returns a json file containing info about product number 666666, is there a way to find all other routes/endpoints?

Thank you!

[cash0me]

all API are different from each other. so no standard/style/shit for the routes/endpoints. the only way its to start looking at the http request of every page so you can scrap more of their routes.

[iNuke]

all API are different from each other. so no standard/style/shit for the routes/endpoints. the only way its to start looking at the http request of every page so you can scrap more of their routes.

Thanks for the reply mate.

Been trying that but didn't get any luck :( Maybe I'm doing it wrong though

[cash0me]

Hit me with the link ;) I need to see so I can help you more.

[iNuke]

Hit me with the link ;) I need to see so I can help you more.

PMed you mate ;)

[Felix]

There are multiple tools available on github that can help you accomplish this - check out parameth and arjun.

[Louis]

There are multiple tools available on github that can help you accomplish this - check out parameth and arjun.

These are very useful especially Arjun, but i don't think these are what he's looking for try finding docs a lot of them are behind passwords but you can just brute them.

[Elitas]

There are also some wordlists you could try with burp intruder. Most APIs have pretty obvious routes, with obvious words, and the intruder will pick up on those that work.