Test 4: Swagger file detection - Security misconfiguration
https://github.com/akto-api-security/...
Swagger file detection - Security misconfiguration. Steps below:
1. Click on run and select swagger file detection test
2. Go to testing and wait for a minute for test results
3. Click on the failed test - Assets found on page
4. Click on the Attempt tab to see the test API call
5. The response contains HTML page with swagger details
6. Verify it by actually entering the URL
🐞 Detected unprotected swagger file!