Show HN: OpenAPI fuzzer – fuzzing APIs based on OpenAPI specification

Re:Show HN: OpenAPI fuzzer – fuzzing APIs based on OpenAPI s... by spuz on Tuesday November 16, 2021 @10:08AM (#29241340)

I've just managed to get this set up with an API but it appears to get stuck testing only one of the endpoints. For example, if I set it up to test an endpoint with a query param like so:

> /search?q=?

Then it seems to try every single value for q it can think of (there are quite a few different possible strings) without ever moving onto the next endpoint. Is there anyway to configure its behaviour or provide hints as to what kind of fuzzing to do?

[ Parent | on HN ]

Re:Show HN: OpenAPI fuzzer – fuzzing APIs based on OpenAPI s... by matusf on Tuesday November 16, 2021 @01:42PM (#29244684)

Thanks for the report. However, without more information I'm not able to help you. What is your setup? How did you run it? could you please share the specification file? Also, let's probably move this discussion to GitHub issues: https://github.com/matusf/openapi-fuzzer/issues

[ Parent | on HN ]