# jayus0821/swagger-hack

自动化爬取并自动测试所有swagger接口

Repository: https://github.com/jayus0821/swagger-hack
Canonical: https://ross.abutalabs.com/products/swagger-hack
Language: Python
License Family: other
Last push: 2025-12-01T05:04:48+00:00

## Health v2 (maintenance only)
Score: 57/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 55, release rhythm 35, longevity 100
- inputs: {"age_days": 2039, "days_push": 275, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1189, forks 117 (observed 2026-08-28T04:03:55.401219+00:00)

## What it is
A Python CLI tool that automatically crawls all endpoints exposed by leaked Swagger/OpenAPI documentation and sends configured test requests to each one. It supports multiple Swagger versions, multiprocess execution, and generates log files of results.

## Use cases
- automatically test all endpoints from an exposed swagger ui
- crawl and probe leaked swagger api documentation
- bulk test openapi endpoints during a pentest
- find vulnerable api endpoints from swagger json
- automate security testing of rest apis discovered via swagger

## When to choose
- you find a leaked swagger/openapi page during authorized security testing and need to test many endpoints quickly
- you want a lightweight python script that handles multiple swagger versions automatically

## When to avoid
- you need a full-featured api security scanner with reporting and ci integration
- the target api is not documented with swagger/openapi
- you lack authorization to test the target - this tool sends real requests to live endpoints

## Facets
- artifact type: cli-tool
- maturity: active
- function: web-scraping, testing, penetration-testing, http-client
- domain: security, penetration-testing, apis, developer-tools
- platform: python, cli, cross-platform
- tags: swagger, api-security-testing, api-fuzzing, openapi, automated-testing, security-scanning

## Member repositories
- jayus0821/swagger-hack (main) score 57

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:55.401219+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:23:11.960502+00:00, confidence not recorded.
  - readme: https://github.com/jayus0821/swagger-hack (fetched 2026-08-28T04:03:55.401219+00:00, sha 40bfe8433995)
- Data as of 2026-08-30T08:39:29.467469+00:00.