JS Endpoint Extractor

Paste hostnames and this pulls their JavaScript, then extracts the API endpoints, paths, and URLs hidden inside — the routes that never appear in the UI.

Only extract from assets you are authorised to assess.