Endpoint Enumeration
Discover exposed API endpoints, health checks, and information disclosure routes on target agents
Tactic
Reconnaissance (Stage 1)
Map the target agent's attack surface, capabilities, and behavioral boundaries
Attack Class
RETROACTIVE-PRIV
Exploiting previously granted access or cached credentials to gain unauthorized capabilities
Evidence
Confirmed in real-world production systems or internet-wide exposure assessments.
DVAA Validation
Reproductions in Damn Vulnerable AI Agent, the OpenA2A intentionally-broken agent for kill-chain validation.
All agents expose /health and /info
Honeypot Coverage (AgentPwn)
An AgentPwn trap page produces a payload tagged with this technique class. Following the AgentPwn taxonomy of trap pages shows what an agent encounters.
Public API and trap routes are themselves enumerable signal.
Evidence Source Breakdown
Evidence Timeline
Shodan May 12, 2026 sweep: 231,482 exposed openclaw services indexed
Shodan sweep discovered 140,000 exposed AI services with accessible endpoints across the public internet
Detection (HackMyAgent)
npx hackmyagent secure --ciLive = check implemented in hackmyagent; queued = declared, not yet implementedDefense (OASB Controls)
How to Cite
AI Agent Threat Matrix T-1001 (Endpoint Enumeration). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-1001