Check your WAF before an attacker does
-
Updated
Jul 20, 2026 - Python
GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — Build software better, together
#
api-security-testingHere are 41 public repositories matching this topic...Language: All
Filter by language
Sort: Most stars
Sort options
Check your WAF before an attacker does
python waf xss python3 rce bypass lfi rfi nosql-injection sqli-injection ssti path-traversal graphql-injection waf-testing api-security-testing waf-bypass-tool
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.
API Security Vulnerability Scanner designed to help you secure your APIs.
graphql security jwt authentication openapi authorization cybersecurity api-testing vulnerability-scanners security-scanner security-tools owasp-top-10 dast api-security api-security-testing
Automated API security testing
testing api graphql security jwt oauth2 rest-api openapi sql-injection owasp-top-10 api-security api-security-testing
Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discovered endpoints and tracks whether their parameters are actually tested in Burp Suite. This helps highlight untested attack surfaces and provides clear visibility of coverage for security teams.
bug-bounty pentesting bugbounty burp-extensions web-application-security security-testing api-security attack-surface burp-suite attack-surface-management api-security-testing burp-extension security-testing-tool
Community generated list of API security tests to find OWASP top10, HackerOne top 10 vulnerabilities
security hacktoberfest hackerone owasp-top-10 security-testing broken-authentication broken-authorization hacktoberfest2023 api-security-testing bola api-misconfigutation
Web Application Pentesting Lab with over 40 plus vulnerability, which covers all the owasp top 10 issues.
owasp cybersecurity bug-bounty web-security pentesting ctf dvwa secure-coding web-application-security pentest-tool juice-shop training-lab vulnerable-app security-lab pentesting-lab api-security-testing web-application-penetration-testing dvws-node
API Testing & Pentesting Inside Chrome DevTools.
security web-crawler api-testing burpsuite security-tools pentest-tool security-testing security-research api-crawler pentest-tools pentesting-tools pentesting-tool api-testing-tool api-security-testing burpsuite-alternatives webslurp web-slurp api-slurp api-endpoints-mapping api-editor
ScriptOcalypse 🏴☠️- Nothing here… just a lot of weird ideas with a chaotic mix of lemonade, boredom, and automation that somehow work.
penetration-testing pentesting ethical-hacking pentest-tool ethical-hacking-tools api-pentest api-security-testing api-pentesting
Multi layer API Security Analyzer built with FastAPI and ML anomaly detection.
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.
GitHub action to run Traceable Active Security Testing in GitHub workflows
A Python-powered reconnaissance tool that hunts exposed secrets, leaked credentials, and sensitive endpoints in web applications.
python injection web-scraping penetration-testing web-security bugbounty vulnerability-scanners security-scanner information-gathering security-tools reconnaissance vulnerability-scanner api-security secrets-detection javascript-analysis api-security-testing web-security-tool vulnerability-scanner-tools
High-performance API endpoint discovery tool for security professionals and bug bounty hunters.
bug-bounty bugbounty endpoint api-discovery endpoints api-security endpoint-security bugbounty-tools api-security-testing api-security-discovery
A community-driven list of custom Escape rules. Test your API security with rules that automatically adapt for you.
security vulnerability-detection api-security 2024 api-security-testing escape-rules escape-custom-rules-templates
Bugsmirror MASST (Mobile Application Security Suite and Tools) is a comprehensive platform for end-to-end mobile application security. It offers threat detection tools for static, runtime, dynamic API testing and red teaming; robust app shielding solution for threat mitigation; threat visibility dashboard; & AI powered insight in a single platform.
anti-tampering secure-communication redteaming jailbreak-detection mobile-application-security runtime-security mobile-application-security-testing root-detection runtime-security-testing static-application-security-testing threat-monitoring app-shielding api-security-testing runtime-application-self-protection threat-mitigation device-integrity threat-dashboard dynamic-application-security-testing threat-detection-response anti-reverse-engineering
API Security Posture Assessment Platform — OWASP API Top 10 Coverage
nodejs express mongodb rest-api owasp penetration-testing appsec security-scanner owasp-top-10 api-security penetration-testing-tools api-security-testing
Professional API security auditing tool that detects rate limiting vulnerabilities and misconfigurations in REST APIs
python security-audit rate-limiting penetration-testing bug-bounty api-testing vulnerability-scanners security-tools devsecops api-security api-security-testing owasp-api-security
Lightweight CLI tool for scanning REST APIs for CORS issues, methods, and info leaks.
python cli rest-api enumeration infosec cli-app bugbounty pentest api-security cors-scanner bugbounty-tool infosectools api-security-testing
A RESTful API brute-forcing tool in Go for ethical hacking practice. **Gobrute** is built for testing login passwords with multithreading, progress tracking, and customizable payloads, ideal for controlled environments like OWASP Juice Shop.
go golang rest-api owasp cybersecurity brute-force infosec pentesting ethical-hacking security-tools owasp-juice-shop owasp-top-10 password-cracking security-testing api-security ethical-hacking-tools api-security-testing password-testing
Add this topic to your repoTo associate your repository with the api-security-testing topic, visit your repo's landing page and select "manage topics." |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |