0xazanul

Use when auditing authorized C or C++ code for memory-safety bugs with fuzzing, sanitizer builds, harness design, corpus planning, crash reproduction, crash minimization, deduplication, exploitability assessment, or confirmed vulnerability reporting. Applies to parsers, codecs, deserializers, file and network protocol handlers, and suspected buffer overflow, use-after-free, double-free, integer overflow, format string, or null-dereference findings.

JavaScript endpoint discovery and attack surface mapping for bug bounty. Discovers JS files from 23+ passive sources, extracts API endpoints via AST parsing, reconstructs sourcemaps, follows webpack chunks, probes API documentation (Swagger, GraphQL, WADL, WSDL), extracts parameters with types and constraints. Trigger on 'endpoint discovery', 'find endpoints', 'js crawl', 'discover APIs', 'anastasis', 'attack surface', 'recon endpoints', 'map API surface', 'find JS endpoints', 'scan domain', 'discover routes', 'js recon', 'API discovery'.