{"adoption": {"forks": 78, "observed_at": "2026-08-28T04:04:49.393264+00:00", "stars": 1472}, "canonical_url": "https://ross.abutalabs.com/products/burpapifinder", "card": {"archived": false, "artifact_type": "plugin", "description": "攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。", "domain": ["security", "penetration-testing", "web-development", "browser-extensions"], "enriched": true, "function": ["security", "vulnerability-scanning", "web-scraping", "developer-tools"], "health_score": 27, "homepage": null, "language": "Java", "license": null, "license_family": "other", "maturity": "active", "member_repos": ["shuanx/BurpAPIFinder"], "name": "shuanx/BurpAPIFinder", "platform": ["jvm"], "pushed_at": "2024-10-03T02:10:22+00:00", "repo": "shuanx/BurpAPIFinder", "stars": 1472, "tags": ["burp-suite-extension", "sensitive-information-detection", "unauthorized-access", "api-discovery", "offensive-security", "red-team", "burp-suite"], "topics": [], "urls": [], "use_cases": ["find sensitive information leaked in javascript files during a pentest", "discover unauthorized API endpoints that expose credentials", "detect leaked cloud access keys and secret keys in web traffic", "enumerate user information or password change endpoints", "find hidden admin backend login URLs", "extract and probe API paths from JS files during red team engagements"], "what_it_is": "BurpAPIFinder is a Burp Suite extension written in Java that passively analyzes HTTP traffic (HTML and JS files) to discover hidden API endpoints, sensitive information leaks, and unauthorized/privilege-escalation access points. It integrates fingerprint libraries from HaE, APIKit, and sweetPotato, and supports active endpoint probing with customizable sensitive keywords.", "when_to_avoid": ["you need a standalone scanner outside Burp Suite", "you require a maintained project with a formal license for compliance-sensitive environments", "you need non-JVM tooling or CI-based automated scanning"], "when_to_choose": ["you are doing offensive security work or red team exercises with Burp Suite", "you want passive sensitive-info detection integrated into your proxy traffic", "you need a free alternative combining HaE, APIKit, and sweetPotato fingerprints"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/burpapifinder", "repo": "shuanx/BurpAPIFinder", "role": "main", "score": 15}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:49.393264+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:34:43.806597+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "d60f59f4a214a457ef3d0d5daa092618f629e7b79c27c8b499dc5ff14d600224", "fetched_at": "2026-08-28T04:04:49.393264+00:00", "kind": "readme", "missing": false, "url": "https://github.com/shuanx/BurpAPIFinder"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 62, "rhythm": 8}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 881, "days_push": 700, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 15, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}