API Security Testing

usestrix/strix

Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level…

Материал обновлён:

Открыть на GitHub
npx skills add usestrix/strix
75 091Звёзды8 489ФоркиПоследний push репозитория

Об этом Skill

Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level…

Почему мы его выбрали

A task from Strix Security Testing Skills. Retain the upstream supporting files and follow the repository’s setup instructions.

Перед использованием

  • Strix CLI with its Docker/LLM configuration, or a managed Strix account. Scans require an authorized target and relevant test credentials.

Поддерживаемые агенты

Claude CodeCodex CLICursorGitHub Copilot

Источники и материалы

Ссылки на оригинальные материалы приведены ниже. Практические идеи предложены редакцией SkillHey.