I built a free Burp/Caido alternative but, zero setup

About I built a free Burp/Caido alternative but, zero setup

An API security workbench for web and Android apps. Point a browser or an Android target at an app and its API surface lands in one session. Free and open source.

In the maker’s words

This is Katriel, the architect of the tool APIaxess. I have been API pentesting for a good time now, and starting with API pentesting was a bit of a rough patch. Specially the setting up and having to know the intricacies of proxies, networking and other stuff. Then once i got through it, the next rough patch was the apk pentesting, where getting the traffic of any apk was more of a task then the pentesting itself. So i started by writing scripts that automates the process and then made sure that any rooted adb just automatically started sending traffic to the burpsuite setup, and then that helped a lot. Then i just thought that this issue needs to be resolved in a more open manner, since its a very known pain point. So i built a GUI around it, made sure that it can handle everything that a normal api traffic tool can and then thought of releasing it, for people to test it out. Before th…

Where people found it

• Hacker NewsShow HN: I built a free Burp/Caido alternative but, zero setup - API Testing32 points5 comments3 days ago