JavaScript endpoint discovery and attack surface mapping for bug bounty. Discovers JS files from 23+ passive sources, extracts API endpoints via AST parsing, reconstructs sourcemaps, follows webpack chunks, probes API documentation (Swagger, GraphQL, WADL, WSDL), extracts parameters with types and constraints. Trigger on 'endpoint discovery', 'find endpoints', 'js crawl', 'discover APIs', 'anastasis', 'attack surface', 'recon endpoints', 'map API surface', 'find JS endpoints', 'scan domain', 'discover routes', 'js recon', 'API discovery'.
2026-04-14