Overview
A powerful toolkit for Bug Bounty Hunters. Includes local IDOR/BOLA hunting, API mapping, and team collaboration.
API Sniffer is a browser-based API testing and security toolkit for developers and pentesters to capture, inspect, and automate network requests. Features: Free Cloud Shell HTTP, WebSocket, and WebRTC Traffic Capture Request Repeater Request Automator F12 DevTools Integration Secrets Scanner JavaScript Analyzer Live Traffic Interceptor JWT Decoder & Editor CORS Misconfiguration Scanner BOLA/IDOR Comparison Tool Out-of-Band (OOB) Interaction Catcher GraphQL Schema Analyzer Request Smuggling Detector Mail Boxes Team Collaboration & Chat What's New in V2.8: Target Canvas ASOS --> An modified kali linux runs in background and user is able to access it from chrome, extension and dev tools
Details
- Version2.8
- UpdatedOctober 16, 2026
- FeaturesOffers in-app purchases
- Size2.96MiB
- LanguagesEnglish (United States)
- Developer
- TraderThis developer has identified itself as a trader per the definition from the European Union and committed to only offer products or services that comply with EU laws.
Privacy
API Sniffer - Endpoint Detector has disclosed the following information regarding the collection and usage of your data. More detailed information can be found in the developer's privacy policy.
API Sniffer - Endpoint Detector handles the following:
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes