Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
owasp-noir
Generates the tree of the directory listing page.
riza