Looking for exposed secrets in API documentation? Meet SwaggerSpy - an OSINT tool that crawls SwaggerHub for publicly exposed API specs and uses regex patterns to extract:
● Hardcoded API keys and tokens
● Database credentials
● Internal endpoints and architecture details
● Authentication secrets
● AWS keys, JWT tokens, and more
Quick Start:
python3 swaggerspy.py example.com
Pro Tips:
1. Combine findings with subdomain enumeration
2. Check for versioned APIs (v1, v2, etc.)
3. Look for staging/dev environments in documentation
#bugbountytips