Releases: Sugobet/API_Sword
API Sword v1.0.6
本次更新内容:
优化了关于cdn|跨站点中的js拼接逻辑,使其通过referer作为baseUrl #29
Optimized the JavaScript concatenation logic in CDN/Cross-Site Scripting to use the referrer as the base URL
添加手动扫描功能,手动扫描会自动添加host到范围列表:burp中对某个请求体进行鼠标右键 -> 扩展 -> API Sword -> API Scan
Added manual scanning functionality. Manual scanning will automatically add hosts to the scope list: Right-click on a request body in Burp Suite -> Extension -> API Sword -> API Scan

API Sword v1.0.5
本次更新添加了以下功能:
This update adds the following features:
- 过滤器 Filter
- 展开节点、收起节点 Exnpand node、Collapse node
另外还将清空site map功能从settings移到了SiteMap的左下角,更方便使用。
In addition, the site map clearing function has been moved from settings to the lower left corner of SiteMap, making it more convenient to use.
API Sword v1.0.4
API Sword v1.0.4
彻底修复因多线程导致防环逻辑依然失效的bug
Completely fix the bug that caused the anti-loop logic to still fail due to multithreading
tip:如果安装在2024.7版本以前的burp,若插件成功安装并未发生任何报错,需在API剑的设置中取消勾选 “是否使用原header”,完成该设置后,2024.7以前的版本上API剑才能正常运行。
tip: If you install it on a version of Burp before 2024.7, if the plugin is successfully installed without any errors, you need to unselect "Use original header" in the API Sword settings. After completing this setting, API Sword will run normally on versions before 2024.7.
API Sword v1.0.3
API Sword v1.0.3
修复自动排序存在显示出错问题
Fixed a display error issue with automatic sorting
优化API列表的UI,插入数据时,方向键不再会被打断施法
Optimized the API list UI so that arrow keys will no longer interrupt spell casting when inserting data
API Sword v1.0.2
API Sword v1.0.2
紧急修复了因多线程导致防环逻辑失效的问题
fixed an issue with anti-loop logic failing due to multithreading.
同时优化了部分代码使其更加适合多线程
Also optimized some code to make it more suitable for multithreading.
API Sword v1.0.1
API Sword v1.0.1
添加了接口路径后、参数前的自定义路径功能:如:domain.com/api/v1/env/;../ (其中的;..为自定义)
Added the custom path function after the interface path and before the parameter: such as: domain.com/api/v1/env/;../ (where ;.. is custom)
API剑全面升级为多线程,默认线程数为1,可在设置修改 #23
The API sword has been fully upgraded to multi-threaded, with the default number of threads being 1, which can be modified in the settings
拥有了多线程的API剑更加效率
The multi-threaded "API Sword" is more efficient
API Sword v1.0.0
API Sword v1.0.0 正式版!
API Sword v1.0.0 Release!
添加 启用主动http请求速率
Added the ability to enable active HTTP request rate
添加 GUI 中英语言切换功能
Added GUI language switching between Chinese and English
优化 其他细节
Optimized other details
即将上线Burp官方插件商店
Coming soon to the Burp official plugin store
API Sword v0.7.0
API Sword v0.6.10
API Sword v0.6.10
3 进一步优化了API剑的匹配逻辑,这次优化过后,绝大部分匹配到的任何js嵌套js嵌套js嵌套js嵌套、各种响应嵌套各种.......都不会被落下,爬取更加深度和全面,任何接口都将无法逃脱API剑的剑刃
XD
API剑亮剑 额外战报:开发者首次在实际项目中使用API剑v0.6.8,仅不到半小时API剑就发现嵌套js中的隐藏未公开功能接口,加手测一波打包严重漏洞拿下,成功下早班。API剑首次亮剑就获得至少让我满意的战绩。(如果不是API剑,那个时候恐怕要系统非常安全了 ;(
API Sword v0.6.8
API Sword v0.6.8
-
增加可选功能【settings】:自定义请求头功能
-
修复了site map的ui闪烁问题
-
修复burp默认header不携带CT字段的问题 #8
-
优化响应table的各个tag的宽度