Show HN: Openapi.security, a fast security checker for REST-based API • Hacker News Board

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#11

Post by iCarossio » Tue, Feb 14, 2023, 7:01 PM UTC

sophieblo wrote: post #8

Really handy this online scan tool! It detected an unauthenticated POST route on my API!

Hope this was the login route haha

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#12

Post by Dribble4633 » Tue, Feb 14, 2023, 7:01 PM UTC

iCarossio wrote: post #6

Dribble4633 wrote: post #4

Can I test my dev API ?

You mean locally?

Yup, thx @nohehf

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#13

Post by spQKL » Tue, Feb 14, 2023, 7:01 PM UTC

Awesome ! I tried and saw grey checks. How can I manage to activate unauthenticated route detection ?

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#14

Post by steffthestunter » Tue, Feb 14, 2023, 7:01 PM UTC

Seems like a nice tool! Just a quick question, I do run some authenticated endpoints and would like to have them scanned. How can I achieve that with this scanner ?

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#15

Post by swan_escape » Tue, Feb 14, 2023, 7:02 PM UTC

spQKL wrote: post #13

Awesome ! I tried and saw grey checks. How can I manage to activate unauthenticated route detection ?

Grey tint checks means that your api is secured. :)

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#16

Post by iCarossio » Tue, Feb 14, 2023, 7:04 PM UTC

steffthestunter wrote: post #14

Seems like a nice tool! Just a quick question, I do run some authenticated endpoints and would like to have them scanned. How can I achieve that with this scanner ?

We plan to support authenticated APIs through headers soon. Stay tuned on our Discord https://discord.escape.tech/

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#17

Post by Patescape » Tue, Feb 14, 2023, 7:38 PM UTC

This is next level, can I really scan any API ?

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#18

Post by helb » Wed, Feb 15, 2023, 10:29 PM UTC

My schema breaks it somehow, the POST request to openapi.prod.scanner.cloud.escape.tech/fast returns a 502 after ~20s: https://i.vgy.me/D14u3k.png

Re: Show HN: Openapi.security, a fast security checker for REST-based API

#19

Post by nohehf » Thu, Feb 16, 2023, 5:51 PM UTC

helb wrote: post #18

My schema breaks it somehow, the POST request to openapi.prod.scanner.cloud.escape.tech/fast returns a 502 after ~20s: https://i.vgy.me/D14u3k.png

Hey! We're sorry for that, we were most likely deploying when you tried it out... You can retry it if you want and if you still have issue i'll be glad to help: https://discord.gg/G9FEuFuKfd