I have to check a site for vulnerabilities in the backend code that validates AJAX parameters and I would like to first generate a list of all addresses that receive AJAX calls.
I am almost certain this can be done with a high probability, as the most common ways to have AJAX are fairly known: XmlHttpRequest, jQuery and other JS libraries; and these are all detectable. So if all other fails, I will probably write something like this myself.
But I would prefer to use an established tool if there is such, since it would probably be both less buggy, and easier.
So, does such a thing exist?