LeakRadar v0.2.0
OWASP API1:2023 RECONNAISSANCE & REMEDIATION

leakradar.
detect & fix bola at scale.

An open-core API security reconnaissance engine. Harvests JWT identity claims, prunes dynamic response volatility across three baselines, and generates automated code fixes for detected BOLA vulnerabilities before production compromise.

Quick Start ● Production Ready v0.2.0
CLI Installation
$ pip install leakradar-cli
Target Scan Output
$ leakradar scan --spec /openapi.json
• 28 Candidate Endpoints Harvested
• 3-Baseline Volatility Pruned
• High-Confidence BOLA: GET /api/v1/orders/{id}
• Patch Generated: FastAPI authorization fix
• Exported Markdown PoC & Executive PDF
License: PolyForm Noncommercial 1.0.0 ajmax76/leakradar
01 / VOLATILITY
1X

Baseline Volatility Normalization

02 / PRECISION
80.0%

False Positive Reduction Rate

03 / REMEDIATION
AUTO

Framework Code Fix Generator

04 / LATENCY
<250ms

Cross-Token Replay Latency

02 / Architecture

Precision
BOLA Engine.

Specifically designed for security researchers, pentest teams, and bug bounty hunters to audit REST APIs and patch authorization flaws automatically.

01 / REMEDIATION ENGINE remediation.py

Automated Framework Code Fixes

Generates drop-in authorization patch code (FastAPI, Django, Express, Spring Boot) for confirmed BOLA vulnerabilities. Supports pay-as-you-go metered tokens or local air-gapped models.

02 / VOLATILITY PRUNING canonicalizer.py

3-Baseline Response Normalization

Executes triple identical User A requests before cross-token evaluation to identify and strip dynamic nonces, session timestamps, and variable request IDs automatically.

03 / ROUTE HARVESTING seeder.py

JWT Identity Claim Binding

Extracts subject claims (sub, user_id, email) directly from authorization tokens to auto-populate parameterized endpoints.

04 / MATRIX REPLAY bola_matrix.py

Scalar Leaf Overlap Evaluation

Replays harvested resources with User B authentication. Measures scalar leaf matching ratios, resource ID echoing, and cross-account data exposure.

05 / SECRET ANALYSIS secrets.py

Shannon Entropy Secret Scanner

Inspects JSON payloads for exposed credentials, AWS keys, Stripe live keys, Slack webhooks, and private keys using regex rules and entropy thresholds.

03 / Commercial Licensing Tiers
Tier 01 PolyForm 1.0

Community

$0 / forever

Core CLI scanner for individual security researchers under PolyForm Noncommercial License.

  • Full BOLA Matrix Replay Engine
  • 3-Baseline Volatility Filter
  • Redacted Markdown PoC Reports
Install CLI Engine
Tier 02 Solo Commercial

Pro Auditor

$30 / month

Designed for independent penetration testers and security leads delivering client audits.

  • Full Commercial Audit License
  • Executive PDF Audits & Max Speed
  • Commercial Rights & 1 Seat
Acquire Pro License
Tier 03 Agency Rights

Agency Suite

$100 / month

For security consulting firms, MSSPs, and vCISOs delivering branded client audit reports.

  • Executive PDF Audits & Max Speed
  • White-Labeling (--logo & --company)
  • Multi-Device Seat Licensing (3 Seats)
Acquire Agency Suite
Tier 04 Enterprise Terms

Enterprise

Custom / tailored

Need custom auth adapters, bespoke CI/CD runners, or tailored AI models? We build to match your stack.

  • Custom AI & Air-Gapped Code Fixes
  • Custom Auth Adapters (Okta, SAML)
  • Dedicated Multi-Seat Pool & SLA