API content discovery TL;DR: kiterunner with route-aware wordlists; spider JS for endpoint patterns; brute method/verb on each path. Stub — to be filled in. What it is TODO Preconditions / where it applies TODO Technique TODO Detection and defence TODO References https://github.com/assetnote/kiterunner