Endpoint Finder: A Static Analysis Tool for Web Endpoint Discovery - Lightning Talk

Discover a powerful static analysis tool for extracting web endpoints from JavaScript files in this 22-minute lightning talk from AppSecCali 2019. Learn how Endpoint Finder overcomes the limitations of regex-based approaches, providing more accurate results with fewer false positives. Explore the tool's capabilities in extracting endpoint URLs, methods, and parameters, and its availability as a plugin for Burp and Zap. Gain insights from Olivier Arteau, a security advisor at Desjardins, as he shares his expertise in leveraging static code analysis for improved web security assessment.