sj

sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

openapi-parser

openapi-parser !UPDATE This extension has been updated to use the latest Burp Montoya Java API. The extension has undergone a complete overhaul to improve both its UI/UX and performance. These changes ensure that the extension is modern and optimised for use. openapi-parser is a Burp Suite...

OFFAT

OWASP OFFAT OWASP OFFAT OFFensive Api Tester is created to automatically test API for common vulnerabilities after generating tests from openapi specification file. It provides feature to automatically fuzz inputs and use user provided inputs during tests specified via YAML config file. Demo Note...

REST-Attacker

REST-Attacker REST-Attacker is an automated penetration testing framework for APIs following the REST architecture style. The tool's focus is on streamlining the analysis of generic REST API implementations by completely automating the testing process - including test generation, access control...

VAmPI

VAmPI The Vulnerable API Based on OpenAPI 3 VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs. It was created as I wanted a vulnerable API to evaluate the efficiency of tools used to detect security issues in APIs. It includes...

openapi_security_scanner

OpenAPI Security Scanner About The Project Authorization security issues in modern web applications could not be easily picked up by security scanners. A few examples from Shopify, LINE, NordVPN. One of the reasons is that the security scanners mainly looking for SQLi, XSS, RCE instead of looking...

CVE-2018-25031

CVE-2018-25031 Description: Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Screenshot before attack: PoC:...

mitmproxy2swagger

mitmproxy2swagger https://user-images.githubusercontent.com/5400940/168086818-c48f60ab-3f95-42eb-b435-c8b1a6326b81.mp4 एक उपकरण जो स्वचालित रूप से mitmproxy कैप्चर को OpenAPI 3.0 विनिर्देशों में परिवर्तित करता है। इसका मतलब है कि आप केवल ऐप्स चलाकर और ट्रैफ़िक कैप्चर करके REST API को स्वचालित रूप...

cherrybomb

cherrybombv1.0.png Stop half-done API specifications 💣 What is Cherrybomb? Cherrybomb is an CLI tool written in Rust that helps prevent incorrect code implementation early in development. It works by validating and testing your API using an OpenAPI file. Its main goal is to reduce security errors...

CVE-2018-25031

CVE-2018-25031 اختبارات استغلال CVE-2018-25031 واجهة Swagger UI قبل الإصدار 4.1.3 قد تسمح لمهاجم عن بُعد بتنفيذ هجمات انتحال. من خلال إقناع الضحية بفتح رابط مُصمم خصيصًا، يمكن للمهاجم استغلال هذه الثغرة لعرض تعريفات OpenAPI عن بُعد. طريقة الاستخدام ابحث عن نقطة نهاية التوثيق وأضف المعامل...

api-security-audit-action

GitHub Action: اختبار الأمان الثابت لواجهات REST API من 42Crunch يبحث إجراء اختبار الأمان الثابت لواجهات REST API عن عقود REST API التي تتبع مواصفة OpenAPI OAS، المعروفة سابقًا باسم Swagger ويجري فحوصات أمان شاملة عليها. يتم دعم كل من OAS v2 و v3.0.x، بتنسيقي JSON و YAML. يمكنك استخدام هذا الإجرا...

BFScan

BFScan أداة للمعالجة الأولية لتطبيقات APK / XAPK / APKM / DEX / JAR / WAR. البحث عن سلاسل نصية في الكود المصدري والموارد تبدو وكأنها URIs أو مسارات أو أسرار توليد طلبات HTTP خام ومواصفات OpenAPI استنادًا إلى ملفات الإعداد والتعليقات التوضيحية للفئات والطرق مكتبات العميل المدعومة Square Retrofit...

restler-fuzzer

RESTler RESTler क्या है? RESTler पहला स्टेटफुल REST API फ़ज़िंग टूल है जो स्वचालित रूप से क्लाउड सेवाओं का उनके REST APIs के माध्यम से परीक्षण करता है और इन सेवाओं में सुरक्षा और विश्वसनीयता बग ढूँढता है। किसी दी गई क्लाउड सेवा के लिए जिसमें OpenAPI पूर्व में Swagger विनिर्देश है, RESTler उसके पू...

OpenAPI Generator <= 7.5.0 - Arbitrary File Read/Delete

OpenAPI Generator versions 7.5.0 and below are prone to an Arbitrary File Read/Delete vulnerability. Attackers can exploit this vulnerability to read and delete files and folders from an arbitrary, writable directory. id: CVE-2024-35219 info: name: OpenAPI Generator = 7.5.0 - Arbitrary File...

Directus < 11.9.0 - Version Disclosure

Directus versions from 9.0.0 before 11.9.0 expose the exact running version through the OpenAPI specification returned by the unauthenticated /server/specs/oas endpoint. The version is placed in the OpenAPI info.version field, letting an unauthenticated attacker fingerprint the precise Directus...

CVE-2026-22785

Tutoriel de reproduction de CVE-2026-22785 Aperçu de la vulnérabilité CVE : CVE-2026-22785 Impact : orval = 7.18.0 CVSS : 9.3 CRITIQUE Type : Injection de code Principe de la vulnérabilité orval Exemple python cvetool.py shell whoami python cvetool.py shell "node --version" python cvetool.py shel...

CVE-2026-23947-PoC

دليل إرشادي: CVE-2026-23947 - تنفيذ تعليمات برمجية عشوائية في Orval يوضح هذا الدليل كيف يمكن لمواصفات OpenAPI غير الموثوقة استغلال Orval لحقن تعليمات برمجية عشوائية في العملاء المُولّدين عبر حقلي x-enumDescriptions و x-enumNames. المتطلبات الأساسية Node.js الإصدار 20 أو 22 npm الإعداد 1. أنشئ...

CVE-2026-33331

CVE-2026-33331 — تخزين XSS في المكوّن الإضافي OpenAPI Reference الخاص بـ oRPC مختبر إثبات مفهوم لثغرة تخزين XSS في توليد توثيق OpenAPI الخاص بـ orpc الغرض يبني oRPC صفحات توثيق API من مواصفة OpenAPI. قبل الإصدار v1.13.9 كان يضع المواصفة مباشرة داخل وسم باستخدام JSON.stringify دون أي ترميز HTML. أ...

reburp

reburp Burp's API/MCP is LIMITED - reburp is a Burp Suite extension that exposes the full Montoya API as a locally served openapi REST API, optimized for your AI agents. Issues | Discussions What is reburp reburp turns Burp Suite into something you can script. It loads as a Java extension and...