APIaxess v0.1.0

APIaxess points at a web app or an Android APK and recovers its real, reachable API surface, then lets you resend, fuzz, and export it. Zero setup, everything bundled, and it all runs on your own machine.

This is the first public release. Windows and Linux today, macOS on the way.

Install

Windows

scoop bucket add apiaxess https://github.com/KatrielMoses/scoop-apiaxess
scoop install apiaxess/apiaxess

Or choco install apiaxess, or grab the MSI below.

Linux (Debian/Ubuntu)

sudo apt install ./apiaxess_0.1.0_amd64.deb

Verify your download

Builds are unsigned for now, so check the SHA-256 checksums in SHA256SUMS against your download. On Windows the first run shows SmartScreen's "unknown publisher, Run anyway".

File	SHA-256
APIaxess-0.1.0-windows-x64.msi	edfa4f71836f917241b6b81c76dde5a5b3236ff3ab4c5745f00b56cdfc079c03
APIaxess-0.1.0-windows-x64-portable.zip	5010da7cf36c8004c54d76812e2b37244a072bc874e2dd96330f70e68776fe7e
apiaxess_0.1.0_amd64.deb	7394fbe794c5d6603fcef3866e19144be1f5f600594bdaece1ee33ba1ca57ad4

Notes

The Android emulator and deep-analysis runtime are optional add-ons that download on first use from apiaxess.dev. The app also checks for updates once a day, which is optional and identifier-free, and you can turn it off in Settings.