{
  "endpoints": {
    "/enum/all": "Master dump — env vars, bindings, process, globals, request context",
    "/enum/r2?limit=100&prefix=X": "Full R2 bucket listing with metadata",
    "/enum/r2/get?key=X": "Read specific R2 object content",
    "/enum/kv?limit=100&prefix=X": "Full KV listing with values",
    "/enum/do": "Deep DO inspection — storage, SQL tables, internal state",
    "/enum/globals": "Deep globalThis enumeration with methods",
    "/enum/modules": "Test which Node.js/Cloudflare modules are importable",
    "/enum/network": "Network reachability probes (metadata, private IPs, collaborator)",
    "/enum/ssrf?url=X&method=GET&h_Header=Val": "Arbitrary SSRF with custom headers",
    "/enum/cache": "Cache API inspection",
    "/enum/websocket": "WebSocket/WebSocketPair availability",
    "/enum/exfil": "Exfil all env vars + headers to collaborator"
  }
}