API-Digger is an automated Swagger UI vulnerability scanner that identifies exposed and potentially vulnerable API documentation endpoints.

• Endpoint Discovery: Automatically scans subdomains to identify potential Swagger UI endpoints
• Version Detection: Uses headless browser automation to detect Swagger UI versions
• Vulnerability Assessment: Identifies known vulnerabilities in detected Swagger UI versions
• Detailed Reporting: Generates comprehensive reports of vulnerable endpoints
• Concurrent Processing: Multi-threaded architecture for faster scanning

• Python 3.7+
• Feroxbuster (for directory enumeration)
• Chrome/Chromium (for headless browser automation)

1. Clone the repository

git clone https://github.com/Somchandra17/API-Digger.git
cd API-Digger

2. Install required Python packages

pip install -r requirements.txt

3. Install Feroxbuster (if not already installed)

# On systems with cargo (Rust package manager)
cargo install feroxbuster

# On Debian/Ubuntu
apt-get install feroxbuster

# On macOS with Homebrew 🏳️‍🌈
brew install feroxbuster

python3 api-digger.py

The script will prompt you for:

• Path to a file containing subdomains to scan
• Custom wordlist option (default: uses raft-medium-directories.txt from SecLists)
• Number of concurrent threads (default: 20)
• Output file name for the scan results

[?] Enter the name of the subdomains file: subdomains.txt
[?] Do you want to use a custom wordlist for directory enumeration? (y/n): n
[*] Using default wordlist: https://raw.githubusercontent.com/danielmiessler/SecLists/refs/heads/master/Discovery/Web-Content/raft-medium-directories.txt
[?] Enter maximum number of concurrent threads (default: 20): 
[?] Enter the output file name: scan_results.txt

API-Digger checks for the following known Swagger UI vulnerabilities:

The tool generates a detailed report containing:

• Scan summary with statistics
• List of all potential Swagger UI endpoints
• Details of vulnerable endpoints with version information
• List of endpoints that encountered errors during scanning

• For optimal performance, adjust thread count based on your system capabilities
• Use a comprehensive subdomain list for better coverage
• Consider using custom wordlists for specialized environments

This project is licensed under the MIT License - see the LICENSE file for details.

This tool is designed for security professionals to identify vulnerable Swagger UI instances in their own environments. Always obtain proper authorization before scanning any systems you don't own.