Test REST, GraphQL, and gRPC APIs for security vulnerabilities.
npx skills add https://github.com/overtimepog/greyhatcc --skill api-testing-overtimepog
Please help me install this Agent Skill. Skill: api-testing Source: https://github.com/overtimepog/greyhatcc/tree/main/skills/api-testing Command: npx skills add https://github.com/overtimepog/greyhatcc --skill api-testing-overtimepog
This Skill addresses the critical need for robust API security by automating the discovery, analysis, and testing of various API types against common and complex vulnerabilities.
Use the api-testing skill to scan the provided URL for API vulnerabilities.
High-intent search queries and answers about installing and using this skill.
API penetration testing identifies REST endpoints and probes for authentication bypass, IDOR, and parameter manipulation. This Skill systematically extracts schemas and dispatches agents to test these specific security flaws.
GraphQL API testing extracts schemas to evaluate business logic flaws and authorization matrices. It supports comprehensive security assessments by probing queries and mutations for unauthorized data access.
Automated gRPC security testing discovers endpoints and checks for race conditions. It leverages detailed attack vectors and agent dispatch protocols to systematically identify and exploit concurrency vulnerabilities.
API discovery identifies REST, GraphQL, and gRPC endpoints, including versioning and hidden paths. It systematically maps the API surface before executing security checks like parameter fuzzing.
Assessing microservice API security involves comprehensive endpoint discovery and vulnerability testing. This Skill tests authentication mechanisms and probes for business logic flaws to uncover potential exploits before deployment.
Automated API vulnerability assessment leverages agent dispatch protocols for systematic discovery but relies on extracted schemas. It probes parameter manipulation and race conditions, though complex business logic flaws may require targeted configuration.
salmanabdurrahmanEnumerate REST, GraphQL, and gRPC endpoints via schema analysis and active discovery.
hiddink-aiAutomate CVE report triage with security analysis and remediation planning.
korallisSearch applications and infrastructure for security threats and suspicious patterns.
kfolkesScan Python source code for security vulnerabilities using the Bandit linter.
