Discover and test vulnerabilities in RESTful APIs, GraphQL APIs, and JWT tokens.
npx skills add https://github.com/bingook/bingo --skill api-security-bingook
Please help me install this Agent Skill. Skill: api_security Source: https://github.com/bingook/bingo/tree/main/bingo/skills/api_security Command: npx skills add https://github.com/bingook/bingo --skill api-security-bingook
This Skill automates the process of detecting vulnerabilities in REST APIs, GraphQL, JWT, and OAuth 2.0, significantly reducing the time and effort required for API security testing.
Use the api_security skill to perform a full API security test on 'https://example.com'.
High-intent search queries and answers about installing and using this skill.
Automating REST API security testing detects broken object level authorization (BOLA) and insecure direct object reference (IDOR) vulnerabilities. This Skill automatically tests endpoint authorization by analyzing common paths and parsing HTTP responses to identify broken access controls.
Yes, GraphQL security testing can retrieve schema information through introspection to understand available fields and types. This Skill automates GraphQL vulnerability detection by analyzing the exposed schema and testing endpoints for unauthorized data access.
Detecting JWT weaknesses involves identifying vulnerable tokens, weak secrets, and potential forgery issues. This Skill automates JWT attack detection by parsing token structures and testing secret strength to pinpoint authentication bypass risks.
Yes, HTTPx is required to test for API authentication bypass and mass assignment vulnerabilities. This Skill uses HTTPx and Python libraries to execute network requests, parse responses, and check for rate limits across RESTful and GraphQL APIs.
Yes, this approach checks for rate limits and mass assignment vulnerabilities while testing OAuth 2.0 flows. It automates the discovery of API endpoints and tests for broken authentication, significantly reducing the time required for comprehensive API security testing.
tharunramagiriIntegrate the Meta WhatsApp Business Cloud API for 1:1 messaging.
n4igmeDetect authentication and session management flaws from threat-model.md and recon.md.
langbyyiFuzz REST, SOAP, and GraphQL APIs for vulnerabilities.
bpnrockstarDetect and exploit authentication bypass vulnerabilities in SAML, JWT, and legacy protocols.
