Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
1–10 of 87 posts
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#2Wanted to show off my little project which helps whith reverse engneering APIs used by various apps. It takes HTTP traffic capturewd by mitmproxy and generates an OpenAPI specification for a given REST API.
I have used it already on two apps and the results are good enough to write an alternative client or quickly automate some stuff.
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#3little bit off-topic, but do anybody know of something similar for soap/wsdl? I'm aware of soapui mock service.
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#4this is absolutely insane!!! I understand capturing the REST api network part, is it then examining the request body, headers being sent back and forth to figure out the API?
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#5Wanted to show off my little project which helps whith reverse engneering APIs used by various apps. It takes HTTP traffic capturewd by mitmproxy and generates an OpenAPI specification for a given REST API. I have used it already on two apps and the results are good enough to write an alternative client or quickly automate some stuff.
does it capture route/server rendered pages too?
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#6bravo, I've wanted something like this
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#7Almost exactly a fit against my idea[1] to generate OpenAPI from HAR files. Going to read through to see if I can add HAR support.
[1]: https://github.com/captn3m0/ideas#openapi-specification-gene...
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#8Very interesting! Would this also be able to determine what kind of auth (header tokens, cookies, etc) the APIs require or is that something you still need to detect manually?
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#9Wanted to show off my little project which helps whith reverse engneering APIs used by various apps. It takes HTTP traffic capturewd by mitmproxy and generates an OpenAPI specification for a given REST API. I have used it already on two apps and the results are good enough to write an alternative client or quickly automate some stuff.
does it capture route/server rendered pages too?
It does, but it will only generate schema descriptions for JSON endpoints. Whis means that the URL and method will appear in the spec, but not the response/request schema.
Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
#10Very interesting! Would this also be able to determine what kind of auth (header tokens, cookies, etc) the APIs require or is that something you still need to detect manually?
At this point yes, but I am working on adding this.