1. A method of correlating a static application security testing (SAST) finding and a dynamic application security testing (DAST) finding to analyze at least one vulnerability of an application having a plurality of lines of code, wherein a single line of code is associated with a filename and a line number, the method comprising: creating an endpoint database comprising at least one endpoint object having a filename property and line number property associated with at least one of the following: one or more path properties, one or more parameter data properties, and one or more HTTPMethod data properties; classifying the code as a direct or indirect application framework based on predetermined characteristics; if the framework is classified as direct, then parsing HTTP parameters from at least one single line of code to generate parameter data, determining a path based on the filename associated with the at least one single line of code, and generating at least one endpoint object with the parameter data, the line number associated with the at least one single line of code, the filename associated with the at least one single line of code, and the path; and generating at least one endpoint object for each filename with HTTPMethod data and the filename; if the framework is classified as is indirect, then identifying entity information and controller information associated with at least one single line of code; parsing the entity information and the controller information to generate parameter data and path data and generating at least one endpoint object with the parameter data, the line number associated with the at least one single line of code, the filename associated with the at least one single line of code, and the path; and parsing the entity information and controller information to generate HTTPMethod data and path data and generating at least one endpoint object with the HTTPMethod data, the line number associated with the at least one single line of code, the filename associated with the at least one single line of code, and the path; searching the endpoint database for an endpoint object associated with SAST or DAST results based on search parameters passed by an endpoint query, wherein the search parameters include a SAST finding or a DAST finding; matching the SAST finding and the DAST finding; and merging the SAST finding and the DAST finding to analyze the at least one vulnerability of the application.