https://github.com/gwen001/extract-endpoints
Extract endpoints from source files.
https://github.com/gwen001/extract-endpoints
bugbounty endpoints pentesting php security-tools urls
Last synced: 5 months ago
JSON representation
Extract endpoints from source files.
- Host: GitHub
- URL: https://github.com/gwen001/extract-endpoints
- Owner: gwen001
- License: mit
- Created: 2022-11-08T14:59:56.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2023-03-28T15:47:26.000Z (over 2 years ago)
- Last Synced: 2025-03-31T20:12:13.416Z (6 months ago)
- Topics: bugbounty, endpoints, pentesting, php, security-tools, urls
- Language: PHP
- Homepage:
- Size: 190 KB
- Stars: 22
- Watchers: 2
- Forks: 7
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE.md
Awesome Lists containing this project
- awesome-rainmana - gwen001/extract-endpoints - Extract endpoints from source files. (PHP)
README
extract-endpoints
Extract endpoints from source files.
---
## Description
This PHP tool appplies regexps on files or recursively on directories in order to extract endpoints. This is quite useful to find API urls from JavaScript files. But all types of source file can be parsed (HTML, PHP, Javascript, Java...).
## Install
```
git clone https://github.com/gwen001/extract-endpoints
```
## Usage
```
Usage: php extract-endpoints.php -f/-d [OPTIONS]
Options:
-b beautify javascript files before parsing (requires js-beautify)
--bb beautify and update source file (requires js-beautify)
-c search for comments instead of urls
-d set source directory (required or use -f)
-e file to load (example: js,php,asp) (default: js)
-f set source file (required or use -d)
-g set regexp source file
--gg set regexp
-h force host if none
-i extensions we don't want to display separated by a comma (example: gif,jpg,png)
-k search for keywords instead of urls
-l follow location
-n extensions file we don't want to parse separated by a comma (example: gif,jpg,png)
-r also scan subdirectories
-s force https if no scheme
-t test the urls found
-u remove duplicates (at your own risk!)
-v verbose mode: 0=all, 1=findings, 2=remove extra text
```
---
---
Feel free to [open an issue](/../../issues/) if you have any problem with the script.