The current OpenAPI parsing and handling tools are not geared towards pentesting an API. We created Swagger-EZ to make getting up and running with API pentesting faster and less painful. The Github repository is here.
When auditing an API…
News over the last year has been filled with stories of mobile applications leaking customer information and exposing businesses to lawsuits and bad PR. When a mobile app reaches critical mass and winds up on millions of phones around the…