forallsecure/mapi repository overview

⁠ForAllSecure's Mayhem for API

Mayhem for API is an API Fuzzing tool available today that you can use to fuzz an API that is documented with a swagger/OpenAPI⁠ specification.

This repository provides another way to run the Mayhem for API command line interface, mapi, without installing the CLI into your host environment.

⁠Usage

Use this image to run the Mayhem for API⁠ command line interface in a Docker Container.

Get help running the CLI:

docker run -i -t forallsecure/mapi:latest --help

Fuzz the demo target:

docker run -it -e MAPI_TOKEN=<your-mapi-token> forallsecure/mapi:latest \
  run \
  --url 'https://demo-api.mayhem4api.forallsecure.com/api/v3/' \
  demo-api \
  60 \
  'https://demo-api.mayhem4api.forallsecure.com/api/v3/openapi.json' \
  --interactive

⁠Run the CLI without Docker

Please see our Installation Guide⁠ for instructions on where to download the mapi CLI for your platform.

⁠Documentation

Check out our documentation⁠ for more details.