search

imperva / automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.
MIT License
451 stars 91 forks source link

output against petstore #6

Closed adunkey closed 4 years ago

adunkey commented 4 years ago

Hi,

I have petstore running locally on http://127.0.0.1/api/v3/openapi.json

On another machine I have the api-attack.sh script & I save the swaggerPetStore.json from https://petstore.swagger.io/ to the same directory so I run this:

./api-attack.sh -f swaggerPetStore.json -n [mySwaggerHost] -s http -rcn=403 -rcp=404

I get this at the end of the results:

API Attacks Total tests run: 61, Passes: 39, Failures: 22, Skips: 0

Is this expected? i can't get Auth API key. Please help!

adunkey commented 4 years ago

not a bug