---
id: 3936
title: "Introducing Swagger Jacker: Auditing OpenAPI Definition Files"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/swagger-jacker-auditing-openapi-definition-files"
published_at: "2023-12-12T00:00:00Z"
tags: ["open-source", "api-security", "penetration-testing", "tooling", "openapi", "swagger"]
phying_url: "https://phying.com/item/3936"
lang: en
---

# Introducing Swagger Jacker: Auditing OpenAPI Definition Files

## Summary

Bishop Fox released Swagger Jacker (sj), an open-source tool that audits OpenAPI definition files, helping pentesters find exposed routes and misconfigurations leading to IDOR or SQL injection.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2023-12-12T00:00:00Z
- **Original:** https://bishopfox.com/blog/swagger-jacker-auditing-openapi-definition-files
- **Phying News:** https://phying.com/item/3936