Function api_fuzz

cli/main.py:1172–1194

Fuzz API endpoints for vulnerabilities.

(
    spec_url: str = typer.Argument(..., help="URL to OpenAPI/Swagger spec"),
    max_requests: int = typer.Option(100, "--max", "-m", help="Maximum requests"),
    auth_token: Optional[str] = typer.Option(None, "--token", "-t"),
)

    else:
        console.print(f"[yellow]No specific remediation guide found for: {finding}[/yellow]")
        console.print("[dim]Try keywords like: sql injection, xss, security header, ssl, exposed[/dim]")


# ============== API Security Commands ==============

@apisec_app.command("scan")
def api_scan(
    spec_url: str = typer.Argument(..., help="URL to OpenAPI/Swagger spec"),
    auth_token: str | None = typer.Option(None, "--token", "-t", help="Auth token"),
):
    """Scan API endpoints for vulnerabilities."""
    setup_logging()

    console.print(f"[bold]API Security Scan:[/bold] {spec_url}")

    async def run():
        from modules.apisec import APIEndpointTester, OpenAPIParser

        parser = OpenAPIParser()
        api = await parser.parse_url(spec_url)

        console.print(f"[green]Parsed {len(api.endpoints)} endpoints from {api.title}[/green]")

        tester = APIEndpointTester(auth_token=auth_token)
        result = await tester.test_api(api)