DuffMan

Lightweight CLI Postman client and fuzzer for finding vulnerabilities in Postman collections.

Desktopfree

DuffMan is a free, open-source command-line tool that parses Postman collections and fuzz-tests every endpoint defined in them, while also working as a lightweight terminal Postman client for browsing and sending requests. It's aimed at developers and security analysts who want to find vulnerabilities and check error handling across an existing collection without leaving the terminal.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of DuffMan - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim DuffMan to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether DuffMan (or something else) actually fits.

Try a problem