PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing Swagger Jacker: Auditing OpenAPI Definition Files

bishopfox.com | blog | #open-source | #api-security | #penetration-testing | #tooling | #openapi | #swagger
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox released Swagger Jacker (sj), an open-source tool that audits OpenAPI definition files, helping pentesters find exposed routes and misconfigurations leading to IDOR or SQL injection.
Published
Collected

Related coverage

blog · blog.trailofbits.com
SequenceHash: multihashing for the rest of us
We're releasing SequenceHash and its sister function SequenceMAC, a pair of related hash constructions that bring secure multihashing to developers using hash functions other than Keccak.
blog · netspi.com
Application Security: Shifting Left to the Right Degree
Podcast recap with Checkmarx CTO Maty Siman on maturing application security: what shift left really means as open source, APIs, and component-based development expand the modern attack surface.
research · volexity.com
Go Get ‘Em: Updates to Volexity Golang Tooling
# Go Get ‘Em: Updates to Volexity Golang Tooling August 11, 2025 Ivan Mladenov _This blog post was the final deliverable for asummer internship project, which was completed under the direction of...
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · portswigger.net
API Security: The 6 biggest challenges AppSec teams face, and how to solve them.
PortSwigger distills six API security pain points for AppSec teams — visibility, automation, compliance, skills gaps, tooling limits, and resources — and maps them to BSEE features.
blog · portswigger.net
Unlock enhanced API scanning with Burp Suite
Burp Suite's enhanced API scanning removes the need to host definition files, detects APIs left exposed to attackers, supports more OpenAPI endpoints, and can scan APIs requiring authentication.
Back