Overview#

The Cyber Attack Simulation Platform is a professional-grade security testing solution designed to help organizations identify vulnerabilities and assess their defensive posture through controlled cyber attack simulations. Built for security teams, penetration testers, and risk management professionals, this platform enables realistic attack scenario modeling without exposing production systems to actual threats.

The platform supports multiple attack types with configurable intensity levels, allowing security professionals to simulate various threat vectors and measure organizational resilience. It integrates a comprehensive vulnerability database and provides detailed security reports that inform remediation strategies and security improvements.

Ideal users include enterprise security teams, managed security service providers (MSSPs), penetration testing firms, and compliance-focused organizations that need evidence-based security assessments to validate defensive controls and meet regulatory requirements.

Usage#

Example Request#

Run a simulated phishing and SQL injection attack against a test environment with medium intensity:

json

{
  "simulationData": {
    "target": {
      "hostname": "test-app.internal.company.com",
      "port": 443,
      "protocol": "https",
      "environment": "staging"
    },
    "attackTypes": [
      "phishing",
      "sql_injection"
    ],
    "intensity": 5,
    "sessionId": "sess-a1b2c3d4e5f6g7h8",
    "timestamp": "2025-01-15T14:30:00Z"
  },
  "sessionId": "sess-a1b2c3d4e5f6g7h8",
  "userId": 12847,
  "timestamp": "2025-01-15T14:30:00Z"
}

Example Response#

json

{
  "success": true,
  "simulationId": "sim-9x8y7z6w5v4u3t2s",
  "status": "completed",
  "duration_seconds": 287,
  "timestamp": "2025-01-15T14:35:27Z",
  "findings": {
    "critical": 2,
    "high": 5,
    "medium": 12,
    "low": 18
  },
  "vulnerabilities_discovered": [
    {
      "id": "CVE-2024-1234",
      "type": "sql_injection",
      "severity": "critical",
      "endpoint": "/api/users/search",
      "parameter": "q",
      "remediation": "Use parameterized queries and input validation"
    },
    {
      "id": "vuln-auth-001",
      "type": "weak_authentication",
      "severity": "high",
      "description": "Password policy does not enforce complexity requirements",
      "remediation": "Implement NIST SP 800-63B compliant password policies"
    }
  ],
  "attack_summary": {
    "phishing": {
      "attempts": 50,
      "successful": 8,
      "success_rate": 0.16
    },
    "sql_injection": {
      "attempts": 120,
      "successful": 2,
      "success_rate": 0.017
    }
  },
  "security_score": 62,
  "recommendation": "Address critical vulnerabilities immediately. Implement security awareness training for phishing resistance."
}

Endpoints#

GET /#

Health Check

Verifies that the Cyber Attack Simulation Platform API is operational.

Parameters: None

Response:

• Status 200: Service health confirmation with operational status

---

POST /api/cyber/simulation#

Run Cyber Simulation

Initiates and executes a cyber attack simulation against a specified target with configured attack types and intensity level. Generates a comprehensive security report with vulnerability findings and remediation guidance.

Parameters:

NameTypeRequiredDescriptionsimulationDataobjectYesContainer for simulation configuration including target details, attack types, and intensitysimulationData.targetobjectNoTarget system details (hostname, port, protocol, environment)simulationData.attackTypesarray[string]NoList of attack types to simulate (e.g., phishing, sql_injection, ddos, brute_force)simulationData.intensityintegerNoIntensity level of simulation from 1-10 (default: 3). Higher values increase attack aggressivenesssimulationData.sessionIdstringYesUnique identifier for this simulation sessionsimulationData.timestampstringYesISO 8601 timestamp when simulation was initiatedsessionIdstringYesTop-level session identifier for request trackinguserIdinteger or nullNoID of the user initiating the simulation (optional)timestampstringYesISO 8601 timestamp of request submission

Response:

• Status 200: Simulation execution results including vulnerabilities discovered, attack summary, security score, and remediation recommendations
• Status 422: Validation error if required parameters are missing or malformed

---

GET /api/cyber/vulnerabilities#

Get Vulnerability Database

Retrieves comprehensive vulnerability database information including known CVEs, vulnerability classifications, and threat intelligence data used for simulation and assessment.

Parameters: None

Response:

• Status 200: Vulnerability database metadata, counts by severity, CVE listings, and last update timestamp

---

GET /api/cyber/attack-types#

Get Attack Types

Retrieves the complete list of available attack types supported by the simulation platform, including descriptions and recommended intensity ranges for each attack vector.

Parameters: None

Response:

• Status 200: Array of available attack types with descriptions, difficulty levels, and use cases (e.g., phishing, sql_injection, ddos, brute_force, cross_site_scripting, privilege_escalation)

Pricing#

PlanCalls/DayCalls/MonthPriceFree550FreeDeveloper20500$39/moProfessional2005,000$99/moEnterprise100,0001,000,000$299/mo

About#

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

• toolweb.in
• portal.toolweb.in
• hub.toolweb.in
• toolweb.in/openclaw/
• rapidapi.com/user/mkrishna477
• youtube.com/@toolweb-009

References#

• Kong Route: https://api.mkkpro.com/security/cyber-attack-simulation
• API Documentation: https://api.mkkpro.com:8120/docs