kiterunner

Kiterunner is a high-performance content discovery tool designed for modern web applications, specifically for brute-forcing API endpoints by leveraging a curated dataset of Swagger specifications. Unlike traditional tools that focus solely on file and folder discovery, Kiterunner can identify explicitly defined routes with the correct HTTP methods, headers, parameters, and values. Notable features include speed optimizations for scanning, support for various frameworks, and the ability to replay requests, making it particularly effective for identifying vulnerabilities in complex API structures.