Topic: "api-security-testing"
nemesida-waf/waf-bypass
Check your WAF before an attacker does
Language: Python - Size: 733 KB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 1,387 - Forks: 172

akto-api-security/akto
Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure
Language: Java - Size: 243 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 1,343 - Forks: 250

OWASP/OFFAT
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.
Language: Python - Size: 11.9 MB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 634 - Forks: 85

cerberauth/vulnapi
API Security Vulnerability Scanner designed to help you secure your APIs.
Language: Go - Size: 2.33 MB - Last synced at: 1 day ago - Pushed at: 4 days ago - Stars: 153 - Forks: 16

abunuwas/fencer
Automated API security testing
Language: Python - Size: 381 KB - Last synced at: 9 days ago - Pushed at: 12 months ago - Stars: 85 - Forks: 13

akto-api-security/tests-library
Community generated list of API security tests to find OWASP top10, HackerOne top 10 vulnerabilities
Size: 293 MB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 37 - Forks: 34

Traceableai/ast-action
GitHub action to run Traceable Active Security Testing in GitHub workflows
Size: 28.5 MB - Last synced at: 15 days ago - Pushed at: 10 months ago - Stars: 4 - Forks: 1

owasp-offat/offat
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.
Language: Go - Size: 2.78 MB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 2 - Forks: 1

Escape-Technologies/escape-rules
A community-driven list of custom Escape rules. Test your API security with rules that automatically adapt for you.
Size: 36.1 KB - Last synced at: 4 months ago - Pushed at: over 1 year ago - Stars: 2 - Forks: 0

Presh-Cyber/ScriptOcalypse
ScriptOcalypse 🏴☠️- Nothing here… just a lot of weird ideas with a chaotic mix of lemonade, boredom, and automation that somehow work.
Language: Python - Size: 4.88 KB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 1 - Forks: 0

insomn14/Amba2Pen
Amba2Pen is a Python-based tool designed to streamline the penetration testing process by automating various pentest tasks.
Language: Python - Size: 67.4 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

darmado/repl
Replace, load and replay Postman collections to Burp, Zap, etc.
Language: Python - Size: 576 KB - Last synced at: 28 days ago - Pushed at: 28 days ago - Stars: 0 - Forks: 1

lunzai/gobrute
A RESTful API brute-forcing tool in Go for ethical hacking practice. **Gobrute** is built for testing login passwords with multithreading, progress tracking, and customizable payloads, ideal for controlled environments like OWASP Juice Shop.
Language: Go - Size: 8.79 KB - Last synced at: 3 months ago - Pushed at: 9 months ago - Stars: 0 - Forks: 0

0b1000Legs/SpyderByte
An intelligent web-proxy that monitors API requests of a web application and detects API security vulnerabilities automatically.
Language: Python - Size: 42 KB - Last synced at: 18 minutes ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0
