Overview
A powerful toolkit for Bug Bounty Hunters. Includes local IDOR/BOLA hunting, API mapping, and team collaboration.
API Sniffer is a browser-based API testing and security toolkit for developers and pentesters to capture, inspect, and automate network requests. Features: Free Cloud Shell HTTP, WebSocket, and WebRTC Traffic Capture Request Repeater Request Automator F12 DevTools Integration Secrets Scanner JavaScript Analyzer Live Traffic Interceptor JWT Decoder & Editor CORS Misconfiguration Scanner BOLA/IDOR Comparison Tool Out-of-Band (OOB) Interaction Catcher GraphQL Schema Analyzer Request Smuggling Detector Mail Boxes Team Collaboration & Chat What's New in V2.7: Free Cloud Shell Terminal CORS Misconfiguration Scanner Rewritten, Fault-Tolerant JWT Decoder UI and Google Auth Improvements
5 out of 55 ratings
Details
- Version2.7
- UpdatedSeptember 7, 2026
- FeaturesOffers in-app purchases
- Size1.72MiB
- LanguagesEnglish (United States)
- Developer
- TraderThis developer has identified itself as a trader per the definition from the European Union and committed to only offer products or services that comply with EU laws.
Privacy
API Sniffer - Endpoint Detector has disclosed the following information regarding the collection and usage of your data. More detailed information can be found in the developer's privacy policy.
API Sniffer - Endpoint Detector handles the following:
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
Support
For help with questions, suggestions, or problems, please open this page on your desktop browser