Skip to content

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

License

Notifications You must be signed in to change notification settings

joseguzman1337/fuzzapi

 
 

Repository files navigation

Fuzzapi

Fuzzapi is rails application which uses API_Fuzzer and provide UI solution for gem.

Setup

  1. Install ruby in your machine using rvm and rbenv

  2. Clone the repository into your machine

    cd /usr/share/ && git clone https://github.com/4k4xs4pH1r3/fuzzapi.git && cd /usr/share/fuzzapi/ && mkdir -p app/assets/config && echo '{}' > app/assets/config/manifest.js && cd /usr/share/fuzzapi/bin
    
  3. Install & update fuzzapi gem dependencies ruby 2.7.1 + rails 6.0.2.2

    sudo apt-get install libpq-dev -y && sudo apt-get install rbenv ruby-build && rvm install 2.7.1 && rvm use 2.7.1 && gem install rails -v 6.0.2.2 && rbenv rehash && bundle update && gem install API_Fuzzer && gem install rubygems-update && update_rubygems && gem update --system && sudo gem update && gem update `gem outdated | cut -d ' ' -f 1` && bundle install && rails -v && ruby -v && rvm -v && rbenv -v
    
  4. rake db:migrate to create tables, migrations etc.

  5. rails s to run the server and run export REDIS_URL=redis://127.0.0.1:6379/0 && bundle exec sidekiq to run sidekiq.

  6. Open http://localhost:3000 in browser which should point to the application url

Docker

Fuzzapi comes with Docker to simplify installation processing. Following commands will setup application using Docker.

  1. Install ruby in your machine using rvm and rbenv

  2. Clone the repository into your machine

     cd /root && git clone https://github.com/4k4xs4pH1r3/fuzzapi.git && cd /root/fuzzapi/ && mkdir -p app/assets/config && echo '{}' > app/assets/config/manifest.js && cd /root/fuzzapi/bin
    
  3. Install & update fuzzapi gem dependencies ruby 2.7.1 + rails 6.0.2.2

    rvm install 2.7.1 && rvm use 2.7.1 && gem install rails -v 6.0.2.2 && rbenv rehash && bundle update && gem install API_Fuzzer && gem install rubygems-update && update_rubygems && gem update --system && sudo gem update && gem update `gem outdated | cut -d ' ' -f 1` && bundle install && rails -v && ruby -v && rvm -v && rbenv -v
    
  4. Install Docker in your local machine

  5. Run docker-compose build to build the image locally.

  6. Run docker-compose up to run the server.

  7. Open http://localhost:3000 in browser which should point to the application url

Fuzzapi uses API_Fuzzer gem.

Authors: www.twitter.com/abhijeth; www.twitter.com/lalithr95; www.twitter.com/srini0x00

New Scan

scan body

Scan Result

scan

Scan Histoy

scan2

About

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

Resources

License

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Ruby 63.7%
  • HTML 29.6%
  • JavaScript 3.1%
  • Dockerfile 1.7%
  • SCSS 1.5%
  • CoffeeScript 0.3%
  • Procfile 0.1%