Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

APIFuzzer analyzes your API specifications and systematically tests the fields to ensure your application can handle modified parameters, all without the need for programming. It allows you to import API definitions from either local files or remote URLs, supporting both JSON and YAML formats. Every HTTP method is accommodated, and it can fuzz the request body, query strings, path parameters, and request headers. Utilizing random mutations, it also integrates seamlessly with continuous integration systems. The tool can produce test reports in JUnit XML format and has the capability to send requests to alternative URLs. It supports HTTP basic authentication through configuration settings and stores reports of any failed tests in JSON format within a designated folder, thus ensuring that all results are easily accessible for review. Additionally, this enhances your ability to identify vulnerabilities and improve the reliability of your API.

Description

Wapiti is a tool designed for scanning vulnerabilities in web applications. It provides the capability to assess the security of both websites and web applications effectively. By conducting "black-box" scans, it avoids delving into the source code and instead focuses on crawling through the web pages of the deployed application, identifying scripts and forms that could be susceptible to data injection. After compiling a list of URLs, forms, and their associated inputs, Wapiti simulates a fuzzer by inserting various payloads to check for potential vulnerabilities in scripts. It also searches for files on the server that may pose risks. Wapiti is versatile, supporting attacks via both GET and POST HTTP methods, and handling multipart forms while being able to inject payloads into uploaded filenames. The tool raises alerts when it detects anomalies, such as server errors or timeouts. Moreover, Wapiti differentiates between permanent and reflected XSS vulnerabilities, providing users with detailed vulnerability reports that can be exported in multiple formats including HTML, XML, JSON, TXT, and CSV. This functionality makes Wapiti a comprehensive solution for web application security assessments.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

JSON Yes 
XML Yes 
API Blueprint Yes 
Arize Phoenix Yes 
BudgetML Yes 
CircleCI Yes 
Drupal No 
GitHub Yes 
Google Sheets No 
GraphQL Yes 
HTML No 
Microsoft Excel No 
Mozilla Firefox No 
OneDev Yes 
OpenAPIHub Yes 
Python Yes 
SQL No 
Spark NLP Yes 
Swagger Yes 
WordPress No 

Integrations

JSON Yes 
XML Yes 
API Blueprint No 
Arize Phoenix No 
BudgetML No 
CircleCI No 
Drupal Yes 
GitHub No 
Google Sheets Yes 
GraphQL No 
HTML Yes 
Microsoft Excel Yes 
Mozilla Firefox Yes 
OneDev No 
OpenAPIHub No 
Python No 
SQL Yes 
Spark NLP No 
Swagger No 
WordPress Yes 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

PyPI

Website

pypi.org/project/APIFuzzer/

Vendor Details

Company Name

Wapiti

Website

wapiti-scanner.github.io

Product Features

Product Features

Alternatives

go-fuzz Reviews

go-fuzz

dvyukov

Alternatives

Echidna Reviews

Echidna

Crytic
API Fuzzer Reviews

API Fuzzer

Fuzzapi
Peach Fuzzer Reviews

Peach Fuzzer

Peach Tech