-
-
Notifications
You must be signed in to change notification settings - Fork 51
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
7 changed files
with
168 additions
and
152 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,31 @@ | ||
<html> | ||
|
||
<body style='text-align: justify; text-justify: inter-word; font-family: Arial, sans-serif;'> | ||
<h1>Version:</b> <strong>{0}</strong></h1> | ||
|
||
<h2>About {1}</h2> | ||
<p>{1} is a powerful tool designed specifically for testing OpenAPI-based APIs using Burp Suite. Developed by | ||
<strong>Alexandre Teyar</strong>, Managing Director at <strong>Aegis Cyber</strong>, this tool offers a | ||
comprehensive set of features to streamline and enhance your API testing experience. With {1}, you can | ||
efficiently analyze and validate OpenAPI specifications, perform in-depth testing of API endpoints, and gain | ||
valuable insights into the API behavior and security vulnerabilities. | ||
</p> | ||
|
||
<h2>Feedback and Contributions</h2> | ||
<p>Your feedback and contributions are highly valued! We actively encourage you to share your thoughts, suggestions, | ||
and ideas for new features, enhancements, or improvements. To facilitate this, we provide a ticket submission | ||
system where you can directly contribute to shaping the future of {1}. We appreciate your input and strive to | ||
incorporate user feedback to make {1} even more user-friendly and powerful. Additionally, we welcome and | ||
appreciate community contributions through pull requests. By contributing to {1}, you can contribute to the | ||
growth and improvement of the tool, making it even more robust and effective for the entire community of API | ||
testers and developers.</p> | ||
|
||
<h2>Support and Appreciation</h2> | ||
<p>If you have found {1} valuable in testing OpenAPI-based APIs, we kindly request your support. Taking a moment to | ||
give the repository a star and rating it on the BApp Store would mean a lot to us. Your support and feedback are | ||
pivotal in motivating us to continue enhancing the tool for the benefit of the entire community. Your positive | ||
ratings and recommendations can help us reach a wider audience, enabling more developers to benefit from {1} and | ||
enhance their API testing workflows.</p> | ||
</body> | ||
|
||
</html> |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,77 @@ | ||
<html> | ||
|
||
<body style=" | ||
text-align: justify; | ||
text-justify: inter-word; | ||
font-family: Arial, sans-serif; | ||
"> | ||
<p> | ||
This tab allows for the visualization and editing of detected parameters, | ||
including their parsed types and values, within parsed OpenAPI files found | ||
in the 'Parser' tab. | ||
</p> | ||
|
||
<p> | ||
To effectively utilize the match and replace feature when assessing | ||
RESTful APIs based on OpenAPI, ensure that valid test values are set in | ||
the 'Edited Value' column. The match and replace functionality will only | ||
be applied to requests that meet the following conditions: | ||
</p> | ||
|
||
<ul> | ||
<li> | ||
The BurpSuite tool for monitoring/processing is selected in the | ||
'Match/Replace Scope' section of this tab. | ||
</li> | ||
<li> | ||
The request contains at least one parameter with a name and type that | ||
match the 'Parameter' and 'Type' fields, respectively, and its value | ||
matches the 'Parsed Value'. | ||
</li> | ||
</ul> | ||
|
||
<p> | ||
For optimal results and accuracy, populate the 'Edited Value' column with | ||
valid test parameters that trigger an HTTP 200 response before initiating | ||
any scans. | ||
</p> | ||
|
||
<p> | ||
<u>Warning:</u> Operations performed in the 'Parser' tab, such as clicking | ||
'Clear item(s)' or 'Clear all' options in the contextual menu, or clicking | ||
the 'Browse/Load' button, will reset the 'Parameters' tab. These operations include: | ||
</p> | ||
|
||
<ul> | ||
<li> | ||
Any click on the 'Clear item(s)' or 'Clear all' options in the | ||
contextual menu. | ||
</li> | ||
<li>Any click on the 'Browse/Load' button.</li> | ||
</ul> | ||
|
||
|
||
<p>Known bugs <b>(Pull Requests are welcome)</b>:</p> | ||
<ul> | ||
<li> | ||
Body parameters can only be formatted as | ||
'application/x-www-form-urlencoded' due to current limitations in the | ||
Burp Extender API. | ||
</s> | ||
</li> | ||
<li> | ||
<s> | ||
Editing the 'Edited Value' column in the 'Parameters' tab while | ||
filtering the table may result in the edited value being set to | ||
'null'. | ||
</s> | ||
</li> | ||
<li> | ||
To register a change made in the 'Edited Value' column, you should press | ||
the Enter key first and then press the Escape key. | ||
</li> | ||
<li>Deep/recursive parsing of OpenAPI Schema fields is not supported.</li> | ||
</ul> | ||
</body> | ||
|
||
</html> |
Oops, something went wrong.