Directories
¶
| Path | Synopsis |
|---|---|
|
Package browser uses a headless Chromium instance to discover API definitions behind JavaScript-rendered docs UIs (ReDoc, RapiDoc, swagger-ui) by watching the network for the spec request the page makes after it loads.
|
Package browser uses a headless Chromium instance to discover API definitions behind JavaScript-rendered docs UIs (ReDoc, RapiDoc, swagger-ui) by watching the network for the spec request the page makes after it loads. |
|
Package detect identifies whether a URL/response exposes a Swagger/OpenAPI definition and, if so, loads it into a normalized spec.
|
Package detect identifies whether a URL/response exposes a Swagger/OpenAPI definition and, if so, loads it into a normalized spec. |
|
Package discover actively probes targets for exposed Swagger/OpenAPI endpoints using the flagship wordlist, content matchers, and random-path false-positive suppression (technique from brinhosa/apidetector).
|
Package discover actively probes targets for exposed Swagger/OpenAPI endpoints using the flagship wordlist, content matchers, and random-path false-positive suppression (technique from brinhosa/apidetector). |
|
Package exploit verifies a testable Swagger UI remote-spec XSS chain and records generic spec-driven HTML injection using a headless browser for high-accuracy confirmation.
|
Package exploit verifies a testable Swagger UI remote-spec XSS chain and records generic spec-driven HTML injection using a headless browser for high-accuracy confirmation. |
|
Package httpclient provides a shared, rate-limited, concurrent HTTP client used across all SwaggerVu modules.
|
Package httpclient provides a shared, rate-limited, concurrent HTTP client used across all SwaggerVu modules. |
|
Package mcpserver exposes SwaggerVu's bounded inspection and read-intent scanning capabilities over local stdio.
|
Package mcpserver exposes SwaggerVu's bounded inspection and read-intent scanning capabilities over local stdio. |
|
Package osint performs passive discovery of public API definitions via the SwaggerHub spec-search API (technique from UndeadSec/SwaggerSpy).
|
Package osint performs passive discovery of public API definitions via the SwaggerHub spec-search API (technique from UndeadSec/SwaggerSpy). |
|
Package output centralizes result formatting (console, txt, json) for SwaggerVu.
|
Package output centralizes result formatting (console, txt, json) for SwaggerVu. |
|
Package redact provides the single output-boundary sanitizer used by the CLI, reports, and MCP.
|
Package redact provides the single output-boundary sanitizer used by the CLI, reports, and MCP. |
|
Package requestgen turns a normalized OpenAPI spec into concrete HTTP requests, generating example values from schemas (ported/extended from BishopFox/sj).
|
Package requestgen turns a normalized OpenAPI spec into concrete HTTP requests, generating example values from schemas (ported/extended from BishopFox/sj). |
|
Package scan audits a loaded spec by generating bounded requests and recording evidence signals.
|
Package scan audits a loaded spec by generating bounded requests and recording evidence signals. |
|
Package secrets scans text (spec bodies, API responses) for leaked credentials using the merged TruffleHog/SwaggerSpy regex corpus.
|
Package secrets scans text (spec bodies, API responses) for leaked credentials using the merged TruffleHog/SwaggerSpy regex corpus. |
|
Package spec loads and normalizes Swagger 2.0 / OpenAPI 3.x definitions from JSON, YAML, or JavaScript-embedded sources into a single openapi3 document.
|
Package spec loads and normalizes Swagger 2.0 / OpenAPI 3.x definitions from JSON, YAML, or JavaScript-embedded sources into a single openapi3 document. |
|
Package textutil provides small text-similarity helpers shared across modules (discovery false-positive baselining and authenticated-response diffing).
|
Package textutil provides small text-similarity helpers shared across modules (discovery false-positive baselining and authenticated-response diffing). |
|
Package wayback harvests a target's archived URLs from the Wayback Machine CDX API and filters them down to API/Swagger-looking endpoints.
|
Package wayback harvests a target's archived URLs from the Wayback Machine CDX API and filters them down to API/Swagger-looking endpoints. |
Click to show internal directories.
Click to hide internal directories.