{ "openapi": "3.0.1", "info": { "title": "Exploit Radar — Website Attack Surface Monitor", "description": "20 passive, legal checks that watch your domains for what attackers actually look for first: named CVEs with a public-exploit flag, exposed files/buckets, forgotten subdomains, weak SSL, and more. Only new exposures are reported after the baseline check.", "version": "0.1", "x-build-id": "z0ZBqdMwh3orNMBnd" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/0xgollum~exploit-radar/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-0xgollum-exploit-radar", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/0xgollum~exploit-radar/runs": { "post": { "operationId": "runs-sync-0xgollum-exploit-radar", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/0xgollum~exploit-radar/run-sync": { "post": { "operationId": "run-sync-0xgollum-exploit-radar", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "domains" ], "properties": { "domains": { "title": "Domains to watch", "type": "array", "description": "Domains you own or are authorized to audit (no https://, no path). Checked over HTTPS. Run on a schedule - only exposures new since the last check are reported.", "items": { "type": "string" } }, "checks": { "title": "Checks to run", "type": "array", "description": "headers = missing security headers. tls = SSL/TLS cert & protocol issues. exposed_files = leaked config/backup files. cms = CMS/software version disclosure, cross-checked against real named CVEs (with public-exploit flag). dns_spoofing = missing SPF/DMARC (email spoofing protection). subdomains = forgotten subdomains found via public certificate records. exposed_buckets = publicly-listable cloud storage buckets. exposed_ports = open ports/known vulns via Shodan's public database. breach_history = confirmed past ransomware attack on this domain. cookies = missing Secure/HttpOnly/SameSite flags. cors = overly permissive cross-origin config. http_downgrade = plain HTTP not redirected to HTTPS. robots_disclosure = robots.txt tipping off sensitive paths. js_libraries = outdated JS libraries cross-checked against real CVEs. subdomain_takeover = dangling subdomain pointing at an unclaimed cloud service. dns_hygiene = missing DNSSEC/CAA. server_software = web server version cross-checked against real CVEs. source_maps = publicly exposed .map files leaking source code. wp_plugins = outdated WordPress plugins cross-checked against real CVEs. db_admin_panels = exposed phpMyAdmin/Adminer database admin tools.", "items": { "type": "string", "enum": [ "headers", "tls", "exposed_files", "cms", "dns_spoofing", "subdomains", "exposed_buckets", "exposed_ports", "breach_history", "cookies", "cors", "http_downgrade", "robots_disclosure", "js_libraries", "subdomain_takeover", "dns_hygiene", "server_software", "source_maps", "wp_plugins", "db_admin_panels" ] }, "default": [ "headers", "tls", "exposed_files", "cms", "dns_spoofing", "subdomains", "exposed_buckets", "exposed_ports", "breach_history", "cookies", "cors", "http_downgrade", "robots_disclosure", "js_libraries", "subdomain_takeover", "dns_hygiene", "server_software", "source_maps", "wp_plugins", "db_admin_panels" ] }, "request_timeout_secs": { "title": "Request timeout (seconds)", "minimum": 5, "maximum": 60, "type": "integer", "description": "HTTP request timeout per check.", "default": 15 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } }