API Sniffer - Endpoint Detector by Bahawal Ali

API Sniffer - Endpoint Detector is the ultimate all-in-one Swiss Army knife for Bug Bounty Hunters, Penetration Testers, and Security Researchers. Designed to run completely in your browser without the need for heavy external proxies like Burp Suite, this toolkit empowers you to intercept, modify, and analyze web traffic on the fly.

Whether you are hunting for IDOR/BOLA vulnerabilities, analyzing JavaScript for hidden secrets, or testing CORS misconfigurations, API Sniffer has you covered.

🔥 Key Features:
Live Request Interceptor & Repeater: Capture, modify, and drop HTTP/HTTPS requests in real-time. Instantly replay requests to find vulnerabilities.
Automated IDOR & BOLA Hunting: Automatically swap tokens and headers to hunt for authorization bypasses effortlessly.
CORS Misconfiguration Scanner: One-click bulk scanning of all captured endpoints to detect dangerous CORS policies (Access-Control-Allow-Origin).
Passive SAST & JS Analyzer: Automatically scans loaded JavaScript files for sensitive data leaks, API keys, and hidden endpoints.
OOB (Out-of-Band) Sniffer: Generate unique payloads and track out-of-band interactions directly within the dashboard.
GraphQL & HTTP Smuggling Tools: Map GraphQL schemas and test for advanced smuggling vulnerabilities with ease.
Custom Proxy & Token Swapper: Route traffic through custom proxies and apply dynamic Regex-based rules to incoming and outgoing headers.
Team Collaboration: Built-in Mailbox and World Chat to collaborate, share findings, and communicate with other hunters globally.
Live Speed Meter: Keep track of your network's download and upload speeds in real-time with an injected on-screen widget.
Stop relying on bloated desktop software. Turn your browser into a powerful web application security testing toolkit today!