Cyber Risks · PortSwigger Research

5GC API Parser

Summary: A Burp Suite extension called 5GC API Parser, authored by PentHertz and last updated 23 September 2021, assesses 5G core network functions by parsing OpenAPI 3.0 files that the earlier OpenAPI extension in Burp did not support. It generates requests for intrusion testing, taking a target address with URL scheme, a port number and an OpenAPI 3.0 file, after which the requests can be used in Repeater and Intruder to fuzz.

What's compelling: The tooling to point automated fuzzing at 5G core network functions is a free third-party Burp extension, and PortSwigger states it makes no warranty about the quality or usefulness of extensions written by third-party users.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related