Skip to content

Releases: Sugobet/API_Sword

API Sword v1.0.6

03 Nov 06:46
05bd905

Choose a tag to compare

本次更新内容:

优化了关于cdn|跨站点中的js拼接逻辑,使其通过referer作为baseUrl #29
Optimized the JavaScript concatenation logic in CDN/Cross-Site Scripting to use the referrer as the base URL

添加手动扫描功能,手动扫描会自动添加host到范围列表:burp中对某个请求体进行鼠标右键 -> 扩展 -> API Sword -> API Scan
Added manual scanning functionality. Manual scanning will automatically add hosts to the scope list: Right-click on a request body in Burp Suite -> Extension -> API Sword -> API Scan

image

API Sword v1.0.5

06 Oct 12:18
fd27709

Choose a tag to compare

本次更新添加了以下功能:
This update adds the following features:

  1. 过滤器 Filter
  2. 展开节点、收起节点 Exnpand node、Collapse node

另外还将清空site map功能从settings移到了SiteMap的左下角,更方便使用。
In addition, the site map clearing function has been moved from settings to the lower left corner of SiteMap, making it more convenient to use.

API Sword v1.0.4

01 Sep 08:15
96d58ce

Choose a tag to compare

API Sword v1.0.4

彻底修复因多线程导致防环逻辑依然失效的bug
Completely fix the bug that caused the anti-loop logic to still fail due to multithreading

tip:如果安装在2024.7版本以前的burp,若插件成功安装并未发生任何报错,需在API剑的设置中取消勾选 “是否使用原header”,完成该设置后,2024.7以前的版本上API剑才能正常运行。
tip: If you install it on a version of Burp before 2024.7, if the plugin is successfully installed without any errors, you need to unselect "Use original header" in the API Sword settings. After completing this setting, API Sword will run normally on versions before 2024.7.

API Sword v1.0.3

01 Sep 05:53
77c360a

Choose a tag to compare

API Sword v1.0.3

修复自动排序存在显示出错问题
Fixed a display error issue with automatic sorting

优化API列表的UI,插入数据时,方向键不再会被打断施法
Optimized the API list UI so that arrow keys will no longer interrupt spell casting when inserting data

API Sword v1.0.2

30 Aug 21:52
1482a43

Choose a tag to compare

API Sword v1.0.2

紧急修复了因多线程导致防环逻辑失效的问题
fixed an issue with anti-loop logic failing due to multithreading.

同时优化了部分代码使其更加适合多线程
Also optimized some code to make it more suitable for multithreading.

API Sword v1.0.1

30 Aug 14:16
df728d7

Choose a tag to compare

API Sword v1.0.1

添加了接口路径后、参数前的自定义路径功能:如:domain.com/api/v1/env/;../ (其中的;..为自定义)
Added the custom path function after the interface path and before the parameter: such as: domain.com/api/v1/env/;../ (where ;.. is custom)

API剑全面升级为多线程,默认线程数为1,可在设置修改 #23
The API sword has been fully upgraded to multi-threaded, with the default number of threads being 1, which can be modified in the settings

拥有了多线程的API剑更加效率
The multi-threaded "API Sword" is more efficient

API Sword v1.0.0

29 Aug 10:35
8b1c4f6

Choose a tag to compare

API Sword v1.0.0 正式版!
API Sword v1.0.0 Release!

添加 启用主动http请求速率
Added the ability to enable active HTTP request rate

添加 GUI 中英语言切换功能
Added GUI language switching between Chinese and English

优化 其他细节
Optimized other details

即将上线Burp官方插件商店
Coming soon to the Burp official plugin store

API Sword v0.7.0

24 Aug 05:56
83fd4b7

Choose a tag to compare

API Sword v0.7.0

增加了 可选功能【settings】:保存范围及所有配置 功能 #19 #18
增加了 burp卸载处理:避免卸载插件后API剑仍在工作(同时为满足burp官方要求)

修复了ui造成burp卡顿、渲染问题

开发者API剑第二次上场战报:某次短时交战中,API剑在某个厂商web系统前台中通过遍历扫描所有响应、js、接口,发现通用0day并以此继续发现多个0day,不愧是我最骄傲的插件。

API Sword v0.6.10

19 Aug 12:17
cfd3539

Choose a tag to compare

API Sword v0.6.10

  1. 增加可选功能【settings】:绕过危险接口访问 #12
  2. 增加响应列表的tags自动排序(这个功能有可能会导致list错乱,谨慎使用) #13

3 进一步优化了API剑的匹配逻辑,这次优化过后,绝大部分匹配到的任何js嵌套js嵌套js嵌套js嵌套、各种响应嵌套各种.......都不会被落下,爬取更加深度和全面,任何接口都将无法逃脱API剑的剑刃

XD

API剑亮剑 额外战报:开发者首次在实际项目中使用API剑v0.6.8,仅不到半小时API剑就发现嵌套js中的隐藏未公开功能接口,加手测一波打包严重漏洞拿下,成功下早班。API剑首次亮剑就获得至少让我满意的战绩。(如果不是API剑,那个时候恐怕要系统非常安全了 ;(

API Sword v0.6.8

17 Aug 05:05
e2b70df

Choose a tag to compare

API Sword v0.6.8

  1. 增加可选功能【settings】:自定义请求头功能

  2. 修复了site map的ui闪烁问题

  3. 修复burp默认header不携带CT字段的问题 #8

  4. 优化响应table的各个tag的宽度