gossan-hidden 0.3.3

Hidden endpoint and misconfiguration scanner for gossan (CORS, SSRF, JWT, Swagger, cache deception), part of the security research ecosystem
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

# GENERATED from api_versions::LEGACY_SHADOW_PATHS  -  DO NOT hand-edit.
# Regenerate: GOSSAN_GEN_HIDDEN=1 cargo test -p gossan-hidden emit_api_versions_pack
# Tier-B recall FLOOR; extend via community *.toml drop-ins.

[[shadow]]
path = "/dev"
description = "Development API endpoint"
severity = "high"

[[shadow]]
path = "/development"
description = "Development API endpoint"
severity = "high"

[[shadow]]
path = "/staging"
description = "Staging API endpoint"
severity = "high"

[[shadow]]
path = "/stage"
description = "Staging API endpoint"
severity = "high"

[[shadow]]
path = "/beta"
description = "Beta API endpoint"
severity = "medium"

[[shadow]]
path = "/alpha"
description = "Alpha API endpoint"
severity = "medium"

[[shadow]]
path = "/internal"
description = "Internal API endpoint"
severity = "high"

[[shadow]]
path = "/private"
description = "Private API endpoint"
severity = "high"

[[shadow]]
path = "/debug"
description = "Debug API endpoint"
severity = "high"

[[shadow]]
path = "/test"
description = "Test API endpoint"
severity = "medium"

[[shadow]]
path = "/sandbox"
description = "Sandbox API endpoint"
severity = "medium"

[[shadow]]
path = "/preview"
description = "Preview API endpoint"
severity = "low"

[[shadow]]
path = "/canary"
description = "Canary release endpoint"
severity = "low"

[[shadow]]
path = "/api-test"
description = "API test endpoint"
severity = "medium"

[[shadow]]
path = "/api-dev"
description = "API dev endpoint"
severity = "high"

[[shadow]]
path = "/api-internal"
description = "Internal API endpoint"
severity = "high"