tardummy01 / fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses Fuzzapi gem

Fuzzapi

Fuzzapi is rails application which uses API_Fuzzer and provide UI solution for gem.

New Scan

Scan Result

Scan Histoy

Setup

1. Install ruby in your machine either using rvm or rbenv

2. Clone the repository into your localmachine

3. cd /path/Fuzzapi/bin, move to Fuzzapi directory

4. bundle install to install the gem dependencies of the application. (if you are getting some error related to any package search for its dependent packages and install them first. For example if error is related to pg sudo apt-get install libpq-dev then gem install pg -v '0.18.4'. Mostly people get errors related to nokogiri so here are the commands to resolve sudo apt-get install build-essential patch , sudo apt-get install ruby-dev zlib1g-dev liblzma-dev , gem install nokogiri -v '1.6.8.1'

5. rake db:migrate to creates tables, migrations etc.

6. rails s to run the server

7. Open http://localhost:3000 in browser which should point to the application url

8. If u get redis server error, install and start the service separately. (install: sudo apt-get -y install redis-server, check the status: sudo service redis-server status)

9. Close everything and go to Fuzzapi/bin folder.

10. open three tabs of terminal

11. redis-server in first tab

12. bundle exec sidekiq -r urFuzzAPIPath in second tab

13. rails s in third tab then visit and scan localhost:3000

Fuzzapi comes with Docker to simplify installation processing. Following commands will setup application using Docker.

1. Clone the repository into your local machine

2. cd /path/Fuzzapi, move to Fuzzapi directory

3. Install Docker in your local machine

4. Run docker-compose build to build the image locally.

5. Run docker-compose up to run the server.

6. Open http://localhost:3000 in browser which should point to the application url

Fuzzapi uses API_Fuzzer gem.