🔥 Bug Bounty Recon Tip: Find forgotten / hidden APIs & endpoints devs left behind! 🔥

Chain these 2 awesome free tools by @xnl-h4ck3r:

1️⃣ waymore → pulls massive archived URLs + responses from Wayback, Common Crawl, VirusTotal, URLScan, OTX & more

Basic command:
waymore -i target.com -oU waymore-urls.txt

2️⃣ xnLinkFinder → parses those responses / JS / pages and extracts juicy endpoints, parameters, secrets & even generates a target-specific wordlist

Chain it like this:
xnLinkFinder -i waymore-urls.txt -sf target.com -o results/

💡 Pro combo (most people run):
waymore -i example.com -oU urls.txt && xnLinkFinder -i urls.txt -sf example.com -o cli -sp

You’ll often discover undocumented /admin-api/v2, debug endpoints, old GraphQL paths, forgotten params with IDORs, leaked keys etc. → pure passive recon gold!

Install both via pip:
pip install waymore
pip install git+https://github.com/xnl-h4ck3r/xnLinkFinder.git

Repos:
→ https://github.com/xnl-h4ck3r/waymore
→ https://github.com/xnl-h4ck3r/xnLinkFinder

Happy hunting & don’t forget to chain → gau + katana + waymore + xnLinkFinder = monster recon list 😈

#BugBounty #Recon #WebHacking #APIHunting #CyberSecurity