https://github.com/sofianehamlaoui/api-enumeration-wordlist
API Enumeration Wordlist
https://github.com/sofianehamlaoui/api-enumeration-wordlist
Last synced: 7 months ago
JSON representation
API Enumeration Wordlist
- Host: GitHub
- URL: https://github.com/sofianehamlaoui/api-enumeration-wordlist
- Owner: SofianeHamlaoui
- Created: 2024-07-16T19:42:06.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2024-07-16T19:51:13.000Z (about 1 year ago)
- Last Synced: 2025-03-09T09:44:28.801Z (7 months ago)
- Size: 4.92 MB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# API Enumeration Wordlist
Welcome to the API Enumeration Wordlist project! This repository contains a comprehensive wordlist designed to assist security researchers and penetration testers in discovering endpoints and parameter names within APIs.
The wordlist is crafted to improve the efficiency and effectiveness of API enumeration during security assessments.
# Overview
API enumeration is a crucial step in identifying potential attack vectors within web applications.
This wordlist aims to simplify and expedite the process of finding hidden or undocumented API endpoints, parameter names, and values that could be exploited for security vulnerabilities.
# Usage
To use the API Enumeration Wordlist, you can incorporate it into your preferred API enumeration tools, such as:
- [Burp Suite](https://portswigger.net/burp)
- [OWASP ZAP](https://www.zaproxy.org/)
- [FFUF](https://github.com/ffuf/ffuf)
- [Gobuster](https://github.com/OJ/gobuster)
- Custom scripts and tools
Example command using `ffuf`:
```sh
ffuf -u https://example.com/FUZZ -w /path/to/api-wordlist.txt
```
Replace `https://example.com/FUZZ` with the target URL and `/path/to/api-wordlist.txt` with the path to the wordlist file.
# Contributing
We welcome contributions from the community to help improve and expand the wordlist. If you have suggestions or additions, please don't hesitate.