I built Entropy to solve a specific problem: traditional API scanners often miss business logic flaws because they rely on static attack lists. Entropy uses LLMs to analyze your API schema (OpenAPI/GraphQL) and think like an adversary to generate custom attack sequences.Note: I'm currently fixing a small packaging issue, so "pip install" might be temporarily unavailable for the next few hours. In the meantime, you can run it directly from the source by cloning the repo. I'd love to hear your thoughts and feedback!
1 comment
Show HN: Entropy – API security testing using LLMs to generate attack scenarios | Heykuki News