EndpointHunter

Bug bounty tool that extracts API endpoints and secrets from JS, CSS, and HTML.

Desktopfreeglobal

EndpointHunter is a free, open-source security research tool that extracts API endpoints, LFI paths, secrets, and cloud storage URLs from a target's JS, CSS, and HTML files, using multi-threaded scanning. It's built for security researchers and bug bounty hunters doing authorized reconnaissance on in-scope targets.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of EndpointHunter - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim EndpointHunter to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether EndpointHunter (or something else) actually fits.

Try a problem