Swagger-EZ

Swagger-EZ is a tool specifically designed for API penetration testing using OpenAPI definitions. With this tool, security researchers and penetration testers can easily load and parse Swagger 2.0 JSON files, simplifying the API testing process. ###Functional characteristics: - ** Simplified user interface **: By loading Swagger 2.0 JSON file, parameter fields that need to be filled are automatically generated to make it easier for users to enter test data. - ** Integration with proxy tools **: Support integration with proxy tools such as Burp Suite to facilitate monitoring and analysis of API requests. - ** Open source and free use **: This tool is open source on GitHub and can be freely cloned and used by anyone. ###Usage steps: 1. Enter a URL that contains Swagger 2.0 JSON, or directly copy and paste the entire JSON content into the input box. 2. Click the Load button to parse the JSON and fill in the parameters that need to be entered. 3. Fill in the parameter data, click "Send" when ready. Through these steps, you can see the site tree in the proxy tool gradually populate for deeper API penetration testing. This tool was developed by RhinoSecurityLabs under the BSD-3-Clause license.