API Security Testing

关于

This skill transforms Claude into an expert API penetration testing assistant, providing structured methodologies for auditing REST and GraphQL services. It covers the entire security lifecycle from initial reconnaissance and endpoint discovery to deep-dive exploitation of vulnerabilities like mass assignment, horizontal/vertical privilege escalation, and rate-limiting bypasses. It is ideal for security researchers, developers performing self-audits, and QA engineers looking to integrate security testing into their microservices workflow using specialized tools and proven security patterns.

主要功能

• 0 GitHub stars
• Rate limiting analysis and bypass strategy implementation
• Automated injection testing patterns for SQL, NoSQL, and XXE
• GraphQL-specific exploitation including introspection and DoS analysis
• Comprehensive REST and GraphQL reconnaissance and endpoint discovery
• Structured methodologies for IDOR and privilege escalation testing

使用场景

• Performing a deep security audit on a new GraphQL endpoint before production deployment
• Testing microservices for Insecure Direct Object Reference (IDOR) vulnerabilities
• Automating API fuzzing and parameter discovery during the pentesting phase