cysecurity/api-scanner repository overview

⁠API Scanner

Automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specifications and WSDL files.

⁠Features

• OpenAPI/Swagger scanning - Upload your API spec and get a full vulnerability assessment
• SOAP/WSDL support - Scan SOAP APIs using WSDL definitions
• OWASP ZAP integration - Active and passive scanning powered by ZAP
• API fuzzing - Fuzz testing for edge cases and input validation issues
• Web dashboard - Manage scans, view results, and download reports from a browser-based panel
• DOCX reports - Generate detailed vulnerability reports for stakeholders
• TLS by default - HTTPS enabled out of the box
• Multi-user - Role-based access with user management

⁠Quick Start

git clone https://github.com/CSPF-Founder/api-scanner-docker.git
cd api-scanner-docker
python3 setup.py

The setup script generates secure passwords, creates TLS certificates, writes the configuration, and starts the stack. Access the panel at https://localhost:4455.

⁠Architecture

⁠Requirements

• Docker Engine 20.10+
• Docker Compose v2
• Python 3.6+ (for setup script)
• 8 GB RAM minimum (16 GB recommended)

⁠Documentation

Full deployment guide, configuration reference, and troubleshooting: GitHub⁠