Launching today
Apiffuf by Jsmon
API URL fuzzer for API hackers
2 followers
API URL fuzzer for API hackers
2 followers
API URL fuzzer that cross-joins hosts and paths into normalized URLs, probes them over HTTP, and reports responding endpoints. - jsmonhq/apiffuf
Internally at Jsmon, we fuzz lot of API endpoints and hosts. JS files have API paths like /api/v2/users, api/v2/users, /api/v2/users/, and hostnames like api.jsmon.sh/ or api.jsmon.sh or https://api.jsmon.sh/. It requires lot of slash-trimming and normalization manually to probe the URLs for status codes, content length to filter sensitive data leakages.
That's when we built apiffuf. It auto-normalizes the URLs formed after appending hosts and paths, probes the URLs for 4 things: title, status code, content type, and content length of the HTTP response.