nowfound

Life & fun · November 15, 2021

OpenAPI fuzzer – fuzzing APIs based on OpenAPI specification

Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free! - matusf/openapi-fuzzer

OpenAPI fuzzer – fuzzing APIs based on OpenAPI specification launched on November 15, 2021 with 76 votes, #800 of 2,925 launches that month and more than 90% of that year's launches. The site was still online in September 2026, 4 years on.

Visit github.com ↗Alternatives

In plain words

OpenAPI fuzzer is a tool that tests APIs by generating random inputs based on OpenAPI specifications. It's designed for developers who want to identify vulnerabilities and bugs in their API implementations. The tool automates the fuzzing process, systematically probing APIs with unexpected data to uncover potential issues without requiring manual test case creation.

written from the facts on this page · September 2026

Does a similar job

all alternatives →
  • OpenAPI DevTools – Chrome extension that generates an API spec2023 · github.com · ▲811

    Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.

  • Cursor for your API2025 · app.getelva.ai · ▲473

    Generate, edit, lint & test your API workflow in one place

  • ApiHome2022 · apihome.io · ▲73

    Home of API testing

  • Pfuzz, a web fuzzer following the Unix philosophy2024 · github.com · ▲93

    I recently dipped my toes into bug bounty hunting and finding security flaws in web applications. As a friend of UNIX shells I was building a repertoire of command line tools to make and analyze HTTP requests. Fortunately there are already many suitable tools like curl, jq, different fuzzers and some really nice tools for specific tasks by Tom Hudson [1]. However, I disliked that the existing fuzzers were monoliths where I had no easy way of creating custom behavior or analyses. They commonly do a multitude of things: Create multiple requests using one or more wordlist, sending the request,…

  • The HTTP Garden – A Parser Vulnerability Research Tool2024 · github.com · ▲75

    I wrote this tool during an internship at Narf Industries in 2023. It's a REPL that allows for quickly developing, testing, and fuzzing for HTTP request smuggling attack payloads. I started the internship having never worked with web servers, and have now found over 100 HTTP implementation bugs. I attribute this mostly to the ease of experimentation in the Garden. REPL-oriented fuzzing is just a really good interface for finding parsing bugs. It's pretty neat to able to run a differential fuzzer, categorize and display all the discovered discrepancies, then let a human pick through them and…

  • PyFuzz2 – A little fuzzing framework in Python2015 · github.com · ▲42

    My little fuzzing framework inspired by grinder. Contribute to susperius/PyFuzz2 development by creating an account on GitHub.

More life & fun this month

the category →

Source: Show HN post ↗

Launched alongside, November 2021

the whole month →