Pricing

from $4.65 / 1,000 security findings

Try for free

Go to Apify Store

🚀 Strapi Security Scanner - Find Public Leaks

Try for free

Probes a public Strapi instance for misconfigured Public role permissions. Detects content-types readable without auth via /api/{collection}. Returns counts + curl reproducer. Counts only.

Pricing

from $4.65 / 1,000 security findings

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

7 days ago

Last modified

🚀 Strapi CMS Security Scanner - Find Public-Role Leaks API

Below, you can find a list of relevant HTTP API endpoints for calling the 🚀 Strapi Security Scanner - Find Public Leaks Actor. For this, you’ll need an Apify account. Replace <YOUR_API_TOKEN> in the URLs with your Apify API token, which you can find under API & Integrations in Apify Console. For details, see the API reference.

Run Actor

POST
https://api.apify.com/v2/actors/renzomacar~strapi-security-scanner/runs?token=<YOUR_API_TOKEN>

Note: By adding the method=POST query parameter, this API endpoint can be called using a GET request and thus used in third-party webhooks. Please refer to our Run Actor API documentation.

Run Actor synchronously and get dataset items

POST
https://api.apify.com/v2/actors/renzomacar~strapi-security-scanner/run-sync-get-dataset-items?token=<YOUR_API_TOKEN>

Note: This endpoint supports both POST and GET request methods. However, only the POST method allows you to pass input data. For more information, please refer to our Run Actor synchronously and get dataset items API documentation.

Get Actor

GET
https://api.apify.com/v2/actors/renzomacar~strapi-security-scanner?token=<YOUR_API_TOKEN>

For more information, please refer to our Get Actor API documentation.

Actors can be used to scrape web pages, extract data, or automate browser tasks. Use the 🚀 Strapi Security Scanner - Find Public Leaks API programmatically via the Apify API.

You can choose from:

🚀 Strapi Security Scanner - Find Public Leaks API in Python

🚀 Strapi Security Scanner - Find Public Leaks API in JavaScript

🚀 Strapi Security Scanner - Find Public Leaks API through CLI

🚀 Strapi Security Scanner - Find Public Leaks OpenAPI definition

You can start 🚀 Strapi Security Scanner - Find Public Leaks with the Apify API by sending an HTTP POST request to the Run Actorendpoint. An Actor’s input and its content type can be passed as a payload of the POST request, and additional options can be specified using URL query parameters. The 🚀 Strapi Security Scanner - Find Public Leaks is identified within the API by its ID, which is the creator’s username and the name of the Actor.

When the 🚀 Strapi Security Scanner - Find Public Leaks run finishes you can list the data from its default dataset(storage) via the API or you can preview the data directly on Apify Console.

🧭 Directus Security Scanner - Find Leaks

renzomacar/directus-security-scanner

Probes a public Directus instance for misconfigured Public-role permissions. Detects collections readable without auth via /items/{collection}. Returns counts + curl reproducer. Counts only.

Renzo Madueno

🗃️ PocketBase Security Scanner - Find Leaks

renzomacar/pocketbase-security-scanner

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Renzo Madueno

Strapi Programmatic Pages Generator

ales_wilk/strapi-programmatic-pages-generator

Automate bulk programmatic page creation in Strapi CMS using JSON definitions stored in Apify Key-Value Store. Configure your Strapi credentials, point to your Key-Value Store, and let the Actor handle the rest.

Aleš Wilk

🪺 Nhost Security Scanner - Find Public Leaks

renzomacar/nhost-security-scanner

Probes a public Nhost project's Hasura GraphQL endpoint for tables readable by anon role. Detects the #1 cause of Nhost data leaks: forgotten Hasura permission policies. Returns table-level counts + curl reproducer. Counts only.

Renzo Madueno

Supabase RLS Security Scanner - Find Anonymous Data Leaks

renzomacar/supabase-rls-scanner

Supabase RLS security scanner. Probes a public Supabase project for Row-Level-Security misconfigurations and detects tables readable by the anon key - the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated. By Renzo Madueno.

Renzo Madueno

📦 Payload CMS Security Scanner - Find Leaks

renzomacar/payload-security-scanner

Probes a public Payload CMS instance for collections readable without auth. Default templates leave read access wide open during development.

Renzo Madueno

⚡ Convex Security Scanner - Find Public Leaks

renzomacar/convex-security-scanner

Probes a public Convex deployment for queries that return data without auth. Convex queries are public-by-default unless you check auth inside the handler. Returns counts + reproducer.

Renzo Madueno

🔗 Hasura Security Scanner - Find Anon Leaks

renzomacar/hasura-security-scanner

Probes a public Hasura GraphQL endpoint for tables readable by the anon role. Works for self-hosted, Hasura Cloud, and frameworks on top. Counts only.

Renzo Madueno

Website AI Content & Data Leakage Scanner

glowing_glove/website-ai-content-data-leakage-scanner

Find public AI-readable content exposure, sensitive document links, open indexes, sitemap leaks, llms.txt hints, and risky crawl surfaces.

Ushba Khan

🌐 WordPress Security Scanner - REST API User & Draft Leaks

renzomacar/wordpress-security-scanner

WordPress security scanner. Probes the WordPress REST API for endpoints leaking users, plugins, drafts and customer data - the misconfigurations attackers enumerate before a brute-force. 40% of the web runs WordPress. Counts only, no data exfiltrated. Fix guidance included. By Renzo Madueno.

Renzo Madueno