PHASE: Swagger / OpenAPI33% COMPLETION
Abort Mission
MODULE 14

API Reconnaissance

Discovering and mapping undocumented API endpoints (Swagger/GraphQL).

Swagger / OpenAPI

Developers often leave documentation public.

  • /api/docs
  • /swagger-ui.html
  • /v2/api-docs

These paths list every single API endpoint, expected parameters, and data types.