swagger-exp icon indicating copy to clipboard operation
swagger-exp copied to clipboard

A Swagger API Exploit

Results 13 swagger-exp issues
Sort by recently updated
recently updated
newest added

识别不了 直接打开了谷歌浏览器 FastAPI 0.1.0 OAS3 /openapi.json

就是前面运行的不错,中途出现的这样的情况 `Traceback (most recent call last): File "C:\Users\Lenov\Downloads\swagger-exp-master\swagger-exp-master\swagger-exp.py", line 109, in process_doc scan_api(method, base_url, path, params_str) File "C:\Users\Lenov\Downloads\swagger-exp-master\swagger-exp-master\swagger-exp.py", line 130, in scan_api r = requests.post(api_url, data=_params_str, headers=headers, verify=False) File "D:\py\lib\site-packages\requests\api.py",...

url后面是doc.html但是这样就好像无法解析了

师伯支持识别https的网站吗

$ python swagger-exp.py http://10.139.14.14:8086/v2/api-docs [10:18:24] [OK] [API set] http://10.139.14.14:8086/v2/api-docs [10:18:24] [POST] http://10.139.14.14:8086/user/add userVo={OBJECT_UserVo} [10:18:24] [Request] POST http://10.139.14.14:8086/user/add userVo={OBJECT_UserVo} [10:18:24] [Response] Code: 415 Content-Type: application/json Content-Length: 105 [10:18:24] [POST] http://10.139.14.14:8086/area/saveArea areaVo={OBJECT_区域实体}...

error ![image](https://user-images.githubusercontent.com/43526141/144219616-9d575983-2d02-44fe-acfe-833c2690e429.png)

接口文档中的host是127.0.0.1导致扫描报错,建议开始扫描时可手动修改json文档