Find security weaknesses in your API endpoints.
What it does
Assesses API security against the OWASP API Security Top 10 and produces a report of vulnerabilities, severity, and test coverage.
When to use it
Use for authorized API penetration tests, security reviews before production deployment, or validation of API gateway controls and rate limiting.
How to use it
Give it an API target with written testing scope and API documentation; it returns a security assessment report with findings and severity.
What you provide
- the API target
- Your files
Good to know
- cannot be undone: target API
What you need · 6
Requires Burp Suite Professional for intercepting and modifying API requests.
Requires Postman for organizing and executing API test collections.
Requires ffuf for API endpoint and parameter fuzzing.
Access · 1
This skill
target API
Sends potentially destructive API requests (irreversible)