The safeguards map / 1.1 Code and dependencies
OWASP Attack Surface Detector
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A tool that reads a web application's source code to list its endpoints, their parameters and parameter types, as a ZAP and Burp Suite plugin and a command line tool.
Where it sits
1.1 Code and dependencies (primary): Parses a web application's source code to list its endpoints, their parameters and parameter types, and compares the attack surface of two versions.
The Attack Surface Detector performs static code analyses to identify web application endpoints by parsing routes and identifying parameters
captured
It also has the capability to calculate the changes in attack surface between two versions of an application.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make itthose who run it
- Runs
- by hand
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
The tool analyzes source code to feed a tester's DAST work, so it sits in code review.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.