Integration with OpenAPI to discover URL endpoints?

[pbnj-dragon]

Instead of providing individual URL(s) (e.g. -u, -target string[]) or an input list (e.g. -l, -list string), is it possible to point nuclei at an openapi endpoint (e.g. http://127.0.0.1:8080/openapi.json) and have nuclei discover the available URL endpoints to scan?

[pbnj-dragon]

I just came across this PR.

Correct me if I am wrong, but it seems to address the question by adding support for openapi input format, among other formats (e.g. burp, postman, ...etc).

[ehsandeep]

@pbnj-dragon right, this support is getting added for fuzzing layer, where nuclei will fuzz all the endpoint parsed from openapi specs.

[dogancanbakir]

This discussion closed automatically due to inactivity. Feel free to reopen or start new if still relevant.