swagger-exp
swagger-exp copied to clipboard
A Swagger API Exploit
识别不了 直接打开了谷歌浏览器 FastAPI 0.1.0 OAS3 /openapi.json
就是前面运行的不错,中途出现的这样的情况 `Traceback (most recent call last): File "C:\Users\Lenov\Downloads\swagger-exp-master\swagger-exp-master\swagger-exp.py", line 109, in process_doc scan_api(method, base_url, path, params_str) File "C:\Users\Lenov\Downloads\swagger-exp-master\swagger-exp-master\swagger-exp.py", line 130, in scan_api r = requests.post(api_url, data=_params_str, headers=headers, verify=False) File "D:\py\lib\site-packages\requests\api.py",...
url后面是doc.html但是这样就好像无法解析了
师伯支持识别https的网站吗
$ python swagger-exp.py http://10.139.14.14:8086/v2/api-docs [10:18:24] [OK] [API set] http://10.139.14.14:8086/v2/api-docs [10:18:24] [POST] http://10.139.14.14:8086/user/add userVo={OBJECT_UserVo} [10:18:24] [Request] POST http://10.139.14.14:8086/user/add userVo={OBJECT_UserVo} [10:18:24] [Response] Code: 415 Content-Type: application/json Content-Length: 105 [10:18:24] [POST] http://10.139.14.14:8086/area/saveArea areaVo={OBJECT_区域实体}...
error 
接口文档中的host是127.0.0.1导致扫描报错,建议开始扫描时可手动修改json文档