Fuzzyman takes your Openapi 2.0 spec and creates a fuzzed collection of your API to help discover bugs and vulnerabilities. The tests can be run with postman runners.
Fuzzyman can be hosted, but its intended use is to run on a local machine with docker-compose.
Steps to run locally:
- Clone the project from here
- In the root level of
FuzzyMan
, create a.env
file with the following contents:
POSTMAN_API_KEY=<Your Postman API key goes here>
- Run
docker-compose build
from the root directory ofFuzzyman
. - Run
docker-compose up
- Visit
https://localhost
in your web browser, or see this https://www.postman.com/galactic-shuttle-665520/workspace/postman-hackathon for an example of using Fuzzyman as an api.
Because the nginx cert is self-signed, your browser will likely give you a security warning when you visit https://localhost
. Just accept the risk and continue to see the page.
The nginx cert