---
id: 4044
title: "A Snapshot of CAST in Action: Automating API Token Testing"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/automating-api-token-testing"
published_at: "2021-10-21T00:00:00Z"
tags: ["pentesting", "open-source", "automation", "api-security", "api-tokens", "cosmos"]
phying_url: "https://phying.com/item/4044"
lang: en
---

# A Snapshot of CAST in Action: Automating API Token Testing

## Summary

How Bishop Fox's Cosmos team automated API token validation: facing a 32-byte hex token of unknown origin, they built tooling around the open-source streaak/keyhacks checks and contributed upstream.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2021-10-21T00:00:00Z
- **Original:** https://bishopfox.com/blog/automating-api-token-testing
- **Phying News:** https://phying.com/item/4044