matusf / openapi-fuzzer

Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!
GNU Affero General Public License v3.0
526 stars 22 forks source link

Verbose logs for troubleshooting? #33

Open shafr opened 11 months ago

shafr commented 11 months ago

I've just switch to the latest version (using cargo install) and now after starting fuzzing nothing is going on, I just see header & then it hangs. Is there a way to output verbose logs of what's going on ? If I run command with Strace I see that's there's something going on.

Also is there a way to ignore certificates ? When I switch domain to a IP address i'm getting:

Error: unable to send request: https://1.2.3.4/healthcheck: Connection Failed: tls connection init failed: invalid peer certificate: NotValidForName
shafr commented 11 months ago

Ideally to print:

nponsard commented 6 months ago

Hello, for your second request there is now the --skip-tls-verify option added by #34.