search

OWASP / OFFAT

The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.
http://owasp.org/OFFAT/
MIT License
454 stars 64 forks source link

API Testing Error #45

Closed puriaayush01 closed 8 months ago

puriaayush01 commented 8 months ago

I'm encountering an error whenever I attempt to test an API (which is an open-source API). However, when I utilize the following link (https://petstore.swagger.io/v2/swagger.json), the OFFAT Tool functions properly. Could you kindly assist me with resolving this issue?

Error-OFFAT
dmdhrumilmistry commented 8 months ago

Hey @puriaayush01,

From image I can see that you're currently using python version 3.12. I've recently discovered that packages that we're using is crashing due to bug mentioned here.

You try using offat with python 3.11 until this is resolved.

Marking this as resolved for now. If you're still facing issues then feel free to reopen this one.

dmdhrumilmistry commented 8 months ago

This issue has been resolved. Please install latest version of the tool from pypi.

puriaayush01 commented 8 months ago

Hi @dmdhrumilmistry . As per your suggestion I have tried using offat with Python 3.11. But Unfortunately I am getting the same error:

image
puriaayush01 commented 8 months ago

@dmdhrumilmistry Is there an issue if I use another API for testing? Because I don't get any issue when I am using the https://petstore.swagger.io/v2/swagger.json file.

dmdhrumilmistry commented 8 months ago

This seems like parsing issue, I've made several changes to the tool in order fix dependency blocking issue by writing a new parser for openapi and swagger file. Make sure your swagger file contains url/hosts in it. It would be better if you can share your swagger file.

I've created a new issue for the error that you're facing.

You can track this issue from here