<< All versions

Skill v1.0.0

currentAutomated scan100/100
instavm/security-skills/mitm-list-apis
──Details
PublishedOctober 16, 2026 at 07:19 AM
Content Hashsha256:8f59b6930bdac03c...
Git SHAe615be887944
──Files
Files (1 file, 1.1 KB)
SKILL.md1.1 KBactive
SKILL.md · 38 lines · 1.1 KB

version: "1.0.0" name: mitm-list-apis description: List all APIs from mitmproxy traffic capture. Use when user asks to see APIs, endpoints, or wants an overview of captured HTTP traffic for a website or app.


List APIs from Traffic Capture

Analyze the mitmproxy dump (log.txt) and list all APIs for: $ARGUMENTS

Requires: log.txt in the current directory. If it's missing, capture traffic first:
```bash
mitmdump --set flow_detail=3 2>&1 | tee log.txt
```

Instructions

  1. Search log.txt for the target domain/app
  2. Extract unique API endpoints
  3. Group by functionality (auth, user, payment, etc.)

Output Format

For each API found:

  • Method: GET/POST/PUT/DELETE
  • Endpoint: /api/path (skip domain)
  • Input params: Query params or body fields
  • Response fields: Key fields returned (concise)

Grouping Suggestions

  • Authentication (login, register, OTP, token)
  • User Profile (profile, settings, preferences)
  • Transactions (orders, payments, history)
  • Content (products, listings, search)
  • Admin/Internal (if any found)

If no website specified, ask which one to analyze.

All versions