openapi-fuzzer icon indicating copy to clipboard operation
openapi-fuzzer copied to clipboard

Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!

Results 16 openapi-fuzzer issues
Sort by recently updated
recently updated
newest added

Hi, awesome tool :+1: Would it be possible to implement a feature where the OpenApi spec where fetched from URL? For example; I'm using FastAPI for my API, which has...

I have tried to proxy the tool by setting the system's environment variables but the tool doesn't take them into account. I believe it would be very nice to have...

This commit add the detection of an url in the spec file path. If an url is passed as argument, the spec file will be downloaded and parsed. The tls...

I've just switch to the latest version (using cargo install) and now after starting fuzzing nothing is going on, I just see header & then it hangs. Is there a...

``` openapi: 3.1.0 info: title: FastAPI version: 0.1.0 paths: /heroes/: post: summary: Create Hero operationId: create_hero_heroes__post requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/HeroCreate' responses: '200': description: Successful Response content:...

Some of dependencies are outdated like openapiv3 or openapi_utils - https://deps.rs/repo/github/matusf/openapi-fuzzer ![image](https://github.com/matusf/openapi-fuzzer/assets/41945903/f1aa371f-0dbe-4e83-a4b1-1ff766d20c26) Without updating, I'm unable to check if with https://github.com/glademiller/openapiv3/pull/70 will fix my problems