API Sniffer - Endpoint Detector

A powerful toolkit for Bug Bounty Hunters. Includes local IDOR/BOLA hunting, API mapping, and team collaboration.

API Sniffer is a web API testing and security-analysis toolkit for developers and security researchers. It captures HTTP, WebSocket, and WebRTC traffic for inspection and replay, scans traffic for leaked secrets and risky JavaScript patterns, and lets users automate request testing (Repeater/Automator). For subscribers, it adds authorization-testing tools scoped to the same purpose — BOLA/IDOR comparison, out-of-band interaction detection, GraphQL schema analysis, request-smuggling detection — plus team features for coordinating a shared testing engagement. Every feature operates on sites or endpoints the user explicitly selects to test.