apihunter 0.1.2

Async API security scanner with passive and active checks for CORS, CSP, GraphQL, JWT, OpenAPI, and API posture.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

{
  "steps": [
    {
      "url": "https://app.example.com/login",
      "method": "GET",
      "extract": "$.csrf_token",
      "inject_as": {
        "header": "X-CSRF-Token"
      }
    },
    {
      "url": "https://app.example.com/login",
      "method": "POST",
      "body": {
        "username": "{{SCAN_USER}}",
        "password": "{{SCAN_PASS}}"
      },
      "extract": "$.session_token",
      "inject_as": {
        "cookie": "session"
      }
    }
  ],
  "refresh_interval_secs": 1800
}