在测试中偶尔会碰到swagger泄露 常见的泄露如图： 
有的泄露接口特别多，每一个都手动去试根本试不过来 于是用python写了个脚本自动爬取所有接口，配置好传参发包访问
原理是首先抓取http://url/swagger-resources 获取到有哪些标准及对应的文档地址 而后对每个标准下的接口文档进行解析，构造请求包，获取响应
尽量考虑到了所有可能的传参格式，实际测试只有少数几个会500或400响应需要手动修改一下，其余都是401或者200 200就是未授权访问接口了，可以进一步做其他诸如sqli等测试 运行时如图： 
所有测试结果都存储在csv中： 
欢迎大家关注稻草人安全团队，后续有更多技术文章、工具分享等 
pytest-flask An extension of pytest test runner which provides a set of useful tools to simplify testing and development of the Flask extensions and a
time-machine Travel through time in your tests. A quick example: import datetime as dt
AutoParaSelenium A library to make parallel selenium tests that automatically download and setup webdrivers Usage Installation pip install autoparasel
swagger-hack 在测试中偶尔会碰到swagger泄露 常见的泄露如图： 有的泄露接口特别多，每一个都手动去试根本试不过来 于是用python写了个脚本自动爬取所有接口，配置好传参发包访问 原理是首先抓取http://url/swagger-resources 获取到有哪些标准及对应的文档地
show python coverage information directly in emacs
💼 The Social-Engineer Toolkit (SET) 💼 Copyright 2020 The Social-Engineer Toolkit (SET) Written by: David Kennedy (ReL1K) @HackingDave Company: Trust
ScreenPy TITLE CARD: "ScreenPy" TITLE DISAPPEARS.
Welcome to nose2 nose2 is the successor to nose. It's unittest with plugins. nose2 is a new project and does not support all of the features of nose.
Python-Automation-with-openpyxl Using openpyxl in Python, performed following tasks on an Excel Sheet containing Product Suppliers along with their pr
Sneaker-Bot-UK A python bot using the Selenium library to auto-buy specified sneakers on the nike.com website. This bot is still in development and is
Async-Animanga An Async/Aiohttp compatible library. Async-Animanga is an async ready web scraping library that returns Manga information from animepla
apyr apyr (all lowercase) is a simple & easy to use mock API server. It's great for front-end development when your API is not ready, or when you are
I test of an image processing idea to take an image and make neat circuit board art automatically. Inspired by this twitter post by @JackRhysider
Nox - Flexible test automation for Python nox is a command-line tool that automates testing in multiple Python environments, similar to tox. Unlike to
Front End Test Automation Framework with Pytest Installation and running instructions: 1. To install the framework on your local machine: clone the re
GitHub action for AppSweep can be used to continuously integrate app scanning using AppSweep into your Android app build process
A single module to link Python ecosystem to the Web. Have a quick look at the Gallery first to get convinced ! FAQ For any questions, please use Stack
Git Autofetch Git Autofetch is a simple software for fetching new changes from a repo to local repositories after a set time interval. This program is
Redis fixtures and fixture factories for Pytest.This is a pytest plugin, that enables you to test your code that relies on a running Redis database. It allows you to specify additional fixtures for R
Automate home Yet another home automation project because a smart light is more than just on or off. Overview When talking about home automation there
433 Dec 23, 2022
373 Dec 27, 2022
8 Mar 13, 2022
30 Oct 26, 2022
8.4k Dec 31, 2022
39 Nov 15, 2022
736 Dec 16, 2022
1 Apr 06, 2022
4 Dec 14, 2022
3 Sep 22, 2022
55 Nov 25, 2022
3 Dec 12, 2022
941 Jan 03, 2023
2 Jun 17, 2022
14 Oct 06, 2022
66 Dec 21, 2022
10 Jul 21, 2022
86 Dec 23, 2022
62 Oct 10, 2022