Find security gaps in APIs with targeted tests.
What it does
Guides authorized API security assessments to identify vulnerabilities and document evidence of unauthorized access.
When to use it
Use for educational exercises or authorized security assessments, with explicit written permission from the system owner.
How to use it
Give it an exact target and authorized scope; it asks you to confirm proposed commands before testing and reports vulnerability findings.
What you provide
- the exact target
- written authorization and scope
Uses
Good to know
- cannot be undone: target API
Latest review
What you need · 4
Requires Burp Suite or a similar proxy tool.
Requires Python for scripting; the reconnaissance workflow invokes python3.
Access · 3
This skill
target API
Execute
Attempts server command execution
Write
Sends potentially destructive API requests (irreversible)
/etc/passwd
Read
Attempts to read server files