Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs

github.com

Post reply on HN
Print view View original

71–80 of 87 posts

Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs

#71

Post by sohaibtariq »

klyr wrote: post #38

Hi, I would also like to add another tool I'm contributing to at work (cisco) called APIClarity [1]. It aims at reconstructing swagger specifications of REST microservices running in K8S, but can also be run locally. This is a challenging task and we don't support OpenAPI v3 specs yet (we are working on it). Feel free to have a look, and get ideas from it :) We'll also be presenting it at next Kubecon 2022. [1]: http…

Try out https://www.apimatic.io/transformer/ for converting Swagger Specs to OpenAPI

Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs

#74

Post by ducktective »

resoluteteeth wrote: post #48
alufers wrote: post #40

Earlier quoted context omitted.

The problem with pcap is that whe requests there would be encrypted and basically there is no way to practically decrypt them. Mitmproxy solves that by being between the client and server and injecting it's own self-signed certificate (which you need to add to the trusted certificates on the phone, which requires root).

See SSLKEYLOGFILE

explain bit more please? Do you mean root is not needed? Isn't that a curl feature?

Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs

#78

Post by tomatowurst »

SemanticStrengh wrote: post #32
tomatowurst wrote: post #28

Earlier quoted context omitted.

"...and we expect it to be free and open source as our budget for this is zero."

The relationship between actual utility/value and price is only vaguely correlated. Many of the most useful things on earth can't be marketed, not because they're not worth the money but because people are extremely greedy for some kinds of domains and simultaneously are bad at realizing the impact on their lives. E.g I have never spent a single dollar to access music despite being one of the few things in life that…

It's vaguely correlated because you don't value the work of others in general. This means that at some point in your life, others did not value your work and showed you that was perfectly acceptable.

Re: Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs

#80

Post by evnix »

I did something similar a year ago at the company which I work, I basically wrote a middleware that intercepts all the requests(express JS) and writes to a OpenAPI YAML file. It diffs previous requests to see which parts of the request path could be variables. The system isn't perfect but you are 95% there which is better than having no documentation or to hand write documentation or keep that spec file updated with changes that people introduce in the code. (got promoted to tech lead after this :-) )
Post reply on HN