# Comprehensive API Endpoints for Professional Bug Bounty Testing
# Based on real-world reconnaissance and OSINT research
# Updated: 2025 - Over 500+ endpoint patterns

# === CORE API PATTERNS ===
# Basic versioning patterns
/api
/api/v1
/api/v2
/api/v3
/api/v4
/api/v5
/api/v6
/api/1
/api/2
/api/3
/v1
/v2
/v3
/v4
/v5
/v6
/v1.0
/v1.1
/v1.2
/v2.0
/v2.1
/v3.0

# === REST & RESTFUL PATTERNS ===
/rest
/restful
/rest/v1
/rest/v2
/rest/v3
/rest/api
/rest/service
/api/rest
/api/restful

# === GRAPHQL PATTERNS ===
/graphql
/api/graphql
/graphiql
/api/graphiql
/graphql/v1
/graphql/v2
/api/v1/graphql
/api/v2/graphql
/graph
/api/graph
/gql
/api/gql

# === AUTHENTICATION & AUTHORIZATION ===
/auth
/authentication
/authorize
/authorization
/api/auth
/api/authentication
/api/authorize
/api/authorization
/oauth
/oauth2
/oauth/v2
/api/oauth
/api/oauth2
/login
/signin
/sign-in
/api/login
/api/signin
/api/sign-in
/logout
/signout
/sign-out
/api/logout
/api/signout
/token
/tokens
/api/token
/api/tokens
/jwt
/api/jwt
/session
/sessions
/api/session
/api/sessions
/sso
/api/sso
/saml
/api/saml
/oidc
/api/oidc

# === USER MANAGEMENT ===
/user
/users
/account
/accounts
/profile
/profiles
/api/user
/api/users
/api/account
/api/accounts
/api/profile
/api/profiles
/customer
/customers
/api/customer
/api/customers
/member
/members
/api/member
/api/members
/client
/clients
/api/client
/api/clients

# === ADMIN & MANAGEMENT ===
/admin
/administration
/manage
/management
/api/admin
/api/administration
/api/manage
/api/management
/admin/api
/admin/api/v1
/admin/api/v2
/manage/api
/dashboard
/api/dashboard
/panel
/api/panel
/control
/api/control

# === MOBILE & PLATFORM SPECIFIC ===
/mobile
/mobile/api
/mobile/v1
/mobile/v2
/app
/app/api
/app/v1
/app/v2
/ios
/ios/api
/ios/v1
/android
/android/api
/android/v1
/api/mobile
/api/app
/api/ios
/api/android
/tablet
/api/tablet
/desktop
/api/desktop

# === COMPANY-SPECIFIC PATTERNS ===
# Shopify-like
/storefront-api
/admin-api
/partner-api
/vendor-api
/merchant-api
/store-api

# Amazon-like
/aws
/ec2
/s3-api
/lambda

# Microsoft-like
/azure
/office365
/graph-api

# Google-like
/gapi
/googleapis
/maps-api

# GitHub-like
/api/v3
/api/v4
/repos
/api/repos

# Stripe-like
/v1/charges
/v1/customers
/v1/subscriptions

# Twitter-like
/1.1
/2
/api/1.1
/api/2

# === SERVICE PATTERNS ===
/service
/services
/microservice
/microservices
/ms
/svc
/api/service
/api/services
/api/microservice
/webservice
/webservices
/api/webservice
/api/webservices

# === HEALTH & STATUS ===
/health
/healthcheck
/health-check
/healthz
/livez
/readyz
/api/health
/api/healthcheck
/api/health-check
/status
/api/status
/ping
/api/ping
/pong
/api/pong
/heartbeat
/api/heartbeat
/alive
/api/alive
/ready
/api/ready
/up
/api/up
/version
/api/version
/info
/api/info

# === DATA & CONTENT ===
/data
/dataset
/datasets
/api/data
/api/dataset
/api/datasets
/content
/contents
/api/content
/api/contents
/media
/api/media
/assets
/api/assets
/resources
/api/resources
/files
/file
/api/files
/api/file
/documents
/document
/api/documents
/api/document
/upload
/uploads
/api/upload
/api/uploads
/download
/downloads
/api/download
/api/downloads

# === SEARCH & QUERY ===
/search
/api/search
/query
/queries
/api/query
/api/queries
/find
/api/find
/filter
/api/filter
/sort
/api/sort
/suggest
/api/suggest
/autocomplete
/api/autocomplete

# === E-COMMERCE & PAYMENTS ===
/shop
/store
/api/shop
/api/store
/product
/products
/api/product
/api/products
/catalog
/api/catalog
/inventory
/api/inventory
/cart
/carts
/api/cart
/api/carts
/checkout
/api/checkout
/order
/orders
/api/order
/api/orders
/payment
/payments
/api/payment
/api/payments
/billing
/api/billing
/invoice
/invoices
/api/invoice
/api/invoices
/subscription
/subscriptions
/api/subscription
/api/subscriptions

# === COMMUNICATION ===
/mail
/email
/api/mail
/api/email
/message
/messages
/messaging
/api/message
/api/messages
/api/messaging
/sms
/api/sms
/notification
/notifications
/api/notification
/api/notifications
/alert
/alerts
/api/alert
/api/alerts
/chat
/api/chat
/call
/api/call

# === ANALYTICS & TRACKING ===
/analytics
/api/analytics
/stats
/statistics
/api/stats
/api/statistics
/metrics
/api/metrics
/tracking
/api/tracking
/event
/events
/api/event
/api/events
/log
/logs
/logging
/api/log
/api/logs
/api/logging

# === CONFIGURATION & SETTINGS ===
/config
/configuration
/api/config
/api/configuration
/settings
/setting
/api/settings
/api/setting
/preferences
/preference
/api/preferences
/api/preference
/options
/api/options

# === DATABASE & STORAGE ===
/db
/database
/api/db
/api/database
/storage
/api/storage
/cache
/api/cache
/redis
/api/redis
/mongo
/api/mongo
/mysql
/api/mysql
/postgres
/api/postgres

# === INTEGRATION & WEBHOOKS ===
/webhook
/webhooks
/api/webhook
/api/webhooks
/callback
/callbacks
/api/callback
/api/callbacks
/integration
/integrations
/api/integration
/api/integrations
/connect
/api/connect
/sync
/api/sync

# === DOCUMENTATION ===
/docs
/doc
/documentation
/api-docs
/api-doc
/apidocs
/apidoc
/api/docs
/api/doc
/swagger
/swagger-ui
/api/swagger
/openapi
/openapi.json
/swagger.json
/swagger.yaml
/api.json
/api.yaml
/spec
/specs
/api/spec
/api/specs
/schema
/schemas
/api/schema
/api/schemas

# === DEVELOPMENT & TESTING ===
/dev
/develop
/development
/api/dev
/api/develop
/api/development
/test
/testing
/tests
/api/test
/api/testing
/api/tests
/sandbox
/api/sandbox
/demo
/api/demo
/staging
/api/staging
/stage
/api/stage
/beta
/api/beta
/alpha
/api/alpha
/preview
/api/preview

# === ERROR HANDLING & DEBUGGING ===
/debug
/api/debug
/error
/errors
/api/error
/api/errors
/exception
/exceptions
/api/exception
/api/exceptions
/trace
/api/trace

# === SECURITY & AUDIT ===
/security
/api/security
/audit
/auditing
/api/audit
/api/auditing
/compliance
/api/compliance
/policy
/policies
/api/policy
/api/policies

# === BACKUP & RECOVERY ===
/backup
/backups
/api/backup
/api/backups
/restore
/api/restore
/recovery
/api/recovery
/snapshot
/snapshots
/api/snapshot
/api/snapshots

# === MONITORING & ALERTING ===
/monitor
/monitoring
/api/monitor
/api/monitoring
/observe
/api/observe
/watch
/api/watch

# === SOCIAL & COMMUNITY ===
/social
/api/social
/community
/api/community
/forum
/forums
/api/forum
/api/forums
/comment
/comments
/api/comment
/api/comments
/review
/reviews
/api/review
/api/reviews
/rating
/ratings
/api/rating
/api/ratings
/like
/likes
/api/like
/api/likes
/follow
/follows
/api/follow
/api/follows
/share
/api/share

# === GEOLOCATION & MAPPING ===
/geo
/geography
/api/geo
/api/geography
/location
/locations
/api/location
/api/locations
/map
/maps
/mapping
/api/map
/api/maps
/api/mapping
/place
/places
/api/place
/api/places
/address
/addresses
/api/address
/api/addresses
/coordinate
/coordinates
/api/coordinate
/api/coordinates

# === TIME & DATE ===
/time
/api/time
/date
/dates
/api/date
/api/dates
/datetime
/api/datetime
/timezone
/timezones
/api/timezone
/api/timezones
/calendar
/api/calendar
/schedule
/schedules
/api/schedule
/api/schedules

# === IOT & DEVICE MANAGEMENT ===
# Perfect for companies like Wyze
/device
/devices
/api/device
/api/devices
/iot
/api/iot
/sensor
/sensors
/api/sensor
/api/sensors
/camera
/cameras
/api/camera
/api/cameras
/smart
/api/smart
/home
/api/home
/automation
/api/automation
/control
/controls
/api/control
/api/controls

# === AI & MACHINE LEARNING ===
/ai
/artificial-intelligence
/api/ai
/ml
/machine-learning
/api/ml
/api/machine-learning
/model
/models
/api/model
/api/models
/predict
/prediction
/predictions
/api/predict
/api/prediction
/api/predictions
/train
/training
/api/train
/api/training
/inference
/api/inference

# === BLOCKCHAIN & CRYPTO ===
/crypto
/cryptocurrency
/api/crypto
/api/cryptocurrency
/blockchain
/api/blockchain
/bitcoin
/api/bitcoin
/ethereum
/api/ethereum
/wallet
/wallets
/api/wallet
/api/wallets
/transaction
/transactions
/api/transaction
/api/transactions

# === GAME & ENTERTAINMENT ===
/game
/games
/gaming
/api/game
/api/games
/api/gaming
/player
/players
/api/player
/api/players
/score
/scores
/api/score
/api/scores
/leaderboard
/leaderboards
/api/leaderboard
/api/leaderboards
/achievement
/achievements
/api/achievement
/api/achievements

# === FRAMEWORK SPECIFIC ===
# WordPress
/wp-json
/wp-json/wp/v2
/wp-json/wc/v1
/wp-json/wc/v2
/wp-json/wc/v3
/wp-admin/admin-ajax.php

# Drupal
/jsonapi
/rest
/api/v1

# Laravel
/api
/api/v1

# Django
/api/v1
/api/v2

# Express.js
/api
/api/v1

# Spring Boot
/api
/api/v1
/actuator

# ASP.NET
/api
/api/v1
/odata

# Ruby on Rails
/api/v1
/api/v2

# PHP
/api.php
/index.php/api
/api/index.php

# ASP Classic
/api.asp
/api.aspx
/service.asmx

# Java
/api.jsp
/rest
/webapi

# === CLOUD & INFRASTRUCTURE ===
/cloud
/api/cloud
/infrastructure
/api/infrastructure
/compute
/api/compute
/network
/api/network
/cdn
/api/cdn

# === LEGACY & DEPRECATED ===
/legacy
/api/legacy
/old
/api/old
/deprecated
/api/deprecated
/archive
/api/archive
/v0
/api/v0

# === CUSTOM & EXPERIMENTAL ===
/custom
/api/custom
/experimental
/api/experimental
/lab
/labs
/api/lab
/api/labs

# === ADDITIONAL COMMON PATTERNS ===
/endpoint
/endpoints
/api/endpoint
/api/endpoints
/gateway
/api/gateway
/proxy
/api/proxy
/bridge
/api/bridge
/hub
/api/hub
/feed
/feeds
/api/feed
/api/feeds
/stream
/streams
/api/stream
/api/streams

# === PATH VARIATIONS ===
/public
/private
/internal
/external
/secure
/insecure
/protected
/unprotected