A CLI tool to discover internal API endpoints from any website.
npm install -g @ayaanngandhi/api-hunterOr run directly:
npx @ayaanngandhi/api-hunter https://example.comapi-hunter <url>
# Examples:
api-hunter https://twitter.com
api-hunter github.comScans webpage source for common API patterns:
/api/*endpoints/v1/*,/v2/*versioned endpoints- GraphQL endpoints
- fetch() and axios calls
This tool only scans the initial HTML. For SPAs that load APIs dynamically, use browser DevTools Network tab.
For a complete guide on reverse-engineering internal APIs: https://ayaanngandhi.github.io/internal-apis-guide/
If this helped you, consider sponsoring:
- GitHub Sponsors: https://github.com/sponsors/ayaanngandhi
- USDC (Solana):
8wzZThjmL3paCVw79QtmFP1NjXTQArCG4nRRoQrW8ijE
MIT