apihunterx 0.2.0

Scan projects for APIs, URLs and environment variables

🔍 APIHunterX

Scan projects for APIs, SDKs, URLs, environment variables, and exposed secrets.

APIHunterX helps developers, security engineers, and DevOps teams quickly understand what external services a project uses and identify potential security issues.

---

Features

API Discovery

• Detect OpenAI usage
• Detect AWS SDK (boto3)
• Detect Anthropic
• Detect Stripe
• Detect Discord
• Detect Google Gemini
• Detect Tweepy
• Detect Requests / HTTPX

URL Discovery

Find API endpoints such as:

"https://api.openai.com/v1/chat/completions"
"https://api.github.com/repos"
"https://api.stripe.com/v1/customers"

Environment Variable Discovery

Detect:

os.getenv("OPENAI_API_KEY")

os.environ["AWS_SECRET_ACCESS_KEY"]

Scan:

.env
.env.local
.env.example

Secret Detection

Detect potentially exposed:

• OpenAI Keys
• GitHub Tokens
• AWS Access Keys
• Stripe Keys

Example:

OPENAI_KEY="sk-proj-xxxxxxxxxxxxxxxx"

Report Generation

Generate:

• TXT reports
• JSON reports

---

Installation

pip install apihunterx

---

Usage

Scan a Project

api-hunter scan .

JSON Output

api-hunter scan . --json

Example:

{
  "services": [
    "OpenAI",
    "AWS"
  ],
  "urls": [
    "https://api.openai.com/v1/chat/completions"
  ],
  "env_vars": [
    "OPENAI_API_KEY"
  ]
}

---

Example Report

============================================================
API HUNTER REPORT
============================================================

SERVICES
----------------------------------------
- OpenAI
- AWS

API URLS
----------------------------------------
- https://api.openai.com/v1/chat/completions

ENV VARS
----------------------------------------
- OPENAI_API_KEY
- AWS_SECRET_ACCESS_KEY

SECRETS FOUND
----------------------------------------
- OpenAI: sk-proj-...

FILES SCANNED: 42

---

Supported SDKs

Service	Package
OpenAI	openai
AWS	boto3
Anthropic	anthropic
Stripe	stripe
Discord	discord
Gemini	google.generativeai
Tweepy	tweepy
Requests	requests
HTTPX	httpx

---

Project Structure

api_hunter/
│
├── cli.py
├── scanner.py
├── detector.py
├── secret_detector.py
├── env_scanner.py
├── report.py
│
└── data/

---

Roadmap

v0.3.0

• FastAPI route discovery
• Flask route discovery
• requirements.txt scanning
• pyproject.toml analysis

v0.4.0

• Markdown report generation
• HTML reports
• Dependency graph generation

v1.0.0

• JavaScript support
• TypeScript support
• GitHub Action integration
• Security audit mode

---

Contributing

Pull requests, feature requests, and bug reports are welcome.

---

License

MIT License

---

Author

Samarth Patil

GitHub: https://github.com/samarthpatilML