Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...

networking active-directory cybersecurity pentesting appsec wifi-security devsecops sast osint-resources sourcecode-analysis vapt mobile-penetration-testing api-pentesting

• Updated Oct 16, 2026
• TypeScript

API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).

api rest-api restapi penetration-testing api-rest apis api-tools api-security penetration-testing-tools website-security restapis api-sec red-team-tools apisec penetration-testing-tool api-pentesting api-pentesting-tools api-security-tools api-pentes

• Updated Oct 18, 2026

Node.js-based API penetration testing tool with a user-friendly web interface.

rest-api pentesting restful-api api-testing pentest-tool pentesting-tools api-pentesting

• Updated Jan 18, 2025
• EJS

ScriptOcalypse 🏴‍☠️- Nothing here… just a lot of weird ideas with a chaotic mix of lemonade, boredom, and automation that somehow work.

penetration-testing pentesting ethical-hacking pentest-tool ethical-hacking-tools api-pentest api-security-testing api-pentesting

• Updated Nov 19, 2025
• Python

A powerful directory brute-force tool that's tailored for recursive/multiplex operations, API discovery and enumeration, JS file scraping, and lists API HTTP methods, in one command. This is not ONLY for APIs, my tool just excels at them

python api http cybersecurity pentesting kali kalilinux kali-scripts kali-tools pentesting-tools kali-linux-tools enumeration-tool api-pentesting api-pentesting-tools

• Updated Jun 6, 2026
• Python

MCP server for autonomous API logic penetration testing. AI-driven detection of OWASP API Top 10 vulnerabilities (BOLA/IDOR) via multi-session authorization comparison. Supports Bearer, Basic, API Key, Cookie auth. Generates Markdown security audit reports with evidence.

mcp python-security api-security idor bola llm-security api-pentesting model-context-protocol fastmcp authorization-testing owasp-api-security

• Updated Aug 12, 2026
• Python

🛡️ Automate penetration testing with PentestGPT, an AI-driven agent designed to enhance security assessments efficiently and effectively.

openai chatbots pentesting source-code exploitation kali-linux language-model pentest-environment vulnerability-scanners network-security iot-security-testing docker-security wifi-hacking thick-client chatgpt gpt4-api api-pentesting

• Updated Jan 7, 2026

Notes, labs, cheatsheets, and certificate for the API Penetration Testing (ApiSec University) course. Focuses on OWASP API Top 10, attack techniques, and secure API design.

penetration-testing red-team api-security githublearning apisec api-pentesting owasp-api-top10

• Updated Dec 6, 2025

Burp Suite Extension for Parsing and Processing Swagger API

swagger openapi burp appsec swagger2 burp-plugin security-tools burp-extensions openapi3 api-security bapp-store burp-suite montoya-api api-pentesting

• Updated Oct 21, 2026
• Java

Complete OWASP API Top 10 2023 reference. Structured methodology, deep vulnerability analysis, and API security testing techniques. Enterprise-ready API security assessment.

penetration-testing bug-bounty api-security api-pentesting owasp-api-top-10 ali-almansori api-vulnerabilities

• Updated May 19, 2026

Damn Vulnerable API (DVAPI) is an intentionally vulnerable API application designed for learning, practicing, and testing API security concepts.

api golang security vue owasp caddy api-rest caddyserver vulnerable-application security-tools damn-vulnerable apitop10 apisec api-hacking apisecurity api-pentesting

• Updated Aug 10, 2026
• Vue

tracker security pentesting-windows hacking application-security persian source-code bugbounty trackers farsi hacktoberfest network-security forensic-analysis websecurity docker-security active-directory-security llm mobile-pentesting api-pentesting

• Updated Oct 12, 2026