netinject

Lightweight CLI orchestrator for API security testing pipelines.

Wraps existing tools (httpx, nuclei, ffuf, sqlmap, mitmproxy) into unified pipelines with session tracking, baseline capture, and regression detection.

# Build
cargo build --release

# Initialize a project
netinject init --name my-api

# Edit the generated netinject.toml with your target
# Then run:
netinject check     # verify tool installations
netinject recon     # discover endpoints (httpx)
netinject scan      # vulnerability scan (nuclei)
netinject fuzz      # fuzz endpoints (ffuf)
netinject run       # full pipeline (recon → fuzz → scan)

Config is auto-discovered from netinject.toml in the current directory or any parent.

• Orchestrates security tools into ordered pipelines with dependency resolution
• Parses OpenAPI 3.x specs for targeted, spec-driven testing
• Normalizes all tool output into a unified Finding format
• Tracks every run as a session in a local SQLite database
• Captures API baselines and detects regressions between runs
• Outputs findings as tables, JSONL, Markdown, or SARIF

Reimplement scanning, fuzzing, or proxying. It calls the real tools and adds orchestration on top.

[project]
name = "my-api"
target = "https://api.staging.example.com"
spec = "./openapi.yaml"

[scope]
include = ["https://api.staging.example.com/*"]
exclude = ["https://api.staging.example.com/admin/*"]

[adapters.nuclei]
severity = ["high", "critical"]
rate_limit = 100

[[auth]]
name = "staging"
type = "bearer"
token = "${STAGING_TOKEN}"

[[pipeline]]
name = "full-api-scan"
description = "Full API security scan"
steps = [
  { adapter = "httpx", label = "recon" },
  { adapter = "ffuf", label = "fuzz", depends_on = "recon" },
  { adapter = "nuclei", label = "scan", depends_on = "recon" },
]

netinject scan                        # terminal table (default)
netinject scan --format jsonl         # JSON Lines
netinject scan --format markdown -o report.md
netinject scan --format sarif -o findings.sarif

cargo build --release

Or with Nix:

nix build
nix develop   # dev shell with Rust toolchain + security tools

Full docs at netinject.qaidvoid.dev or build locally:

cd docs && bun install && bun run docs:dev

MIT OR Apache-2.0