AutoExploitSwagger is an automated API security testing exploit tool that can be combined with xray, BurpSuite and other scanners.

Last update: Jan 28, 2022

Related tags

Testing AutoExploitSwagger

Overview

Swagger API自动化利用工具

AutoExploitSwagger 是一款可以跟xray，BurpSuite等扫描器结合的自动化API安全测试利用工具。可以在日常安全检查或者利用Swagger信息泄漏的场景下使用。

下载

git clone https://github.com/wyzmlr/AutoExploitSwagger.git

安装

cd AutoExploitSwagger/
pip install -r requirements.txt
python start.py -h

使用帮助

python start.py -h

Swagger API 自动化扫描工具

optional arguments:
  -h, --help            show this help message and exit
  -u TARGET_URL, --url TARGET_URL
                        swagger api地址
  -i PROXY_IP, --ip PROXY_IP
                        proxy ip
  -p PROXY_PORT, --port PROXY_PORT
                        proxy port
  -f URL_FILE, --file URL_FILE
                        批量测试
                        
  Note:
    -u 参数为必选项
    -t 默认10个线程

功能特性

自定义header
- 一般用于接口需授权（企业安全测试场景下可获取测试token后测试）
扫描结果汇总
- 结果和日志路径在settings.py里配置
代理扫描
- 设置xray或burpsuite代理地址即可自动化扫描
批量检测
- 导入存在swagger api泄漏的地址（例：http://x.x.x.x/api/doc，注意格式不要写错）
多线程
- 默认10个，可自定义
TODO

Example 有什么好的想法欢迎提issue～

Minimal example of how to use pytest with automated 'devops' style automated test runs

Pytest python example with automated testing This is a minimal viable example of pytest with an automated run of tests for every push/merge into the m

2 Jan 2, 2022

Language-agnostic HTTP API Testing Tool

Dredd — HTTP API Testing Framework Dredd is a language-agnostic command-line tool for validating API description document against backend implementati

4k Jan 5, 2023

ApiPy was created for api testing with Python pytest framework which has also requests, assertpy and pytest-html-reporter libraries.

ApiPy was created for api testing with Python pytest framework which has also requests, assertpy and pytest-html-reporter libraries. With this f

1 Jul 11, 2022

AutoExploitSwagger is an automated API security testing exploit tool that can be combined with xray, BurpSuite and other scanners.

Related tags

Overview

Swagger API自动化利用工具

功能特性

You might also like...

Minimal example of how to use pytest with automated 'devops' style automated test runs

Language-agnostic HTTP API Testing Tool

ApiPy was created for api testing with Python pytest framework which has also requests, assertpy and pytest-html-reporter libraries.

Simple assertion library for unit testing in python with a fluent API

Main purpose of this project is to provide the service to automate the API testing process

Scalable user load testing tool written in Python

Scalable user load testing tool written in Python

The definitive testing tool for Python. Born under the banner of Behavior Driven Development (BDD).

WEB PENETRATION TESTING TOOL 💥

Owner

A command-line tool and Python library and Pytest plugin for automated testing of RESTful APIs, with a simple, concise and flexible YAML-based syntax

Automated testing tool developed in python for Advanced mathematical operations.

A modern API testing tool for web applications built with Open API and GraphQL specifications.

A modern API testing tool for web applications built with Open API and GraphQL specifications.

pytest plugin for distributed testing and loop-on-failures testing modes.

Avocado is a set of tools and libraries to help with automated testing.

PENBUD is penetration testing buddy which helps you in penetration testing by making various important tools interactive.

PacketPy is an open-source solution for stress testing network devices using different testing methods

A collection of testing examples using pytest and many other libreris

Automated Penetration Testing Framework