GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Build software better, together

#

api-security-testing

Star

Here are 41 public repositories matching this topic...

Language: All
Filter by language
All 41 Python 18 JavaScript 5 Go 3 TypeScript 3 HTML 1 Java 1 Rust 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

nemesida-waf / waf-bypass

Star 1.5k

Check your WAF before an attacker does

python waf xss python3 rce bypass lfi rfi nosql-injection sqli-injection ssti path-traversal graphql-injection waf-testing api-security-testing waf-bypass-tool
  • Updated Jul 20, 2026
  • Python

OWASP / OFFAT

Sponsor
Star 679

The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

owasp api-rest api-security api-hacking api-security-testing offat
  • Updated Nov 4, 2026
  • Python

cerberauth / vulnapi

Star 292

API Security Vulnerability Scanner designed to help you secure your APIs.

graphql security jwt authentication openapi authorization cybersecurity api-testing vulnerability-scanners security-scanner security-tools owasp-top-10 dast api-security api-security-testing
  • Updated Nov 7, 2026
  • Go

abunuwas / fencer

Star 92

Automated API security testing

testing api graphql security jwt oauth2 rest-api openapi sql-injection owasp-top-10 api-security api-security-testing
  • Updated Aug 2, 2024
  • Python

codewithvamp / Burp-Pentest-Coverage-Tracker

Star 49

Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discovered endpoints and tracks whether their parameters are actually tested in Burp Suite. This helps highlight untested attack surfaces and provides clear visibility of coverage for security teams.

bug-bounty pentesting bugbounty burp-extensions web-application-security security-testing api-security attack-surface burp-suite attack-surface-management api-security-testing burp-extension security-testing-tool
  • Updated Mar 16, 2026
  • Python

akto-api-security / tests-library

Star 41

Community generated list of API security tests to find OWASP top10, HackerOne top 10 vulnerabilities

security hacktoberfest hackerone owasp-top-10 security-testing broken-authentication broken-authorization hacktoberfest2023 api-security-testing bola api-misconfigutation
  • Updated Nov 4, 2026

nr-yolo / Vulnshop

Star 33

Web Application Pentesting Lab with over 40 plus vulnerability, which covers all the owasp top 10 issues.

owasp cybersecurity bug-bounty web-security pentesting ctf dvwa secure-coding web-application-security pentest-tool juice-shop training-lab vulnerable-app security-lab pentesting-lab api-security-testing web-application-penetration-testing dvws-node
  • Updated Apr 5, 2026
  • JavaScript

hangga / webslurp

Sponsor
Star 9

API Testing & Pentesting Inside Chrome DevTools.

security web-crawler api-testing burpsuite security-tools pentest-tool security-testing security-research api-crawler pentest-tools pentesting-tools pentesting-tool api-testing-tool api-security-testing burpsuite-alternatives webslurp web-slurp api-slurp api-endpoints-mapping api-editor
  • Updated Aug 4, 2026
  • JavaScript

Presh-Cyber / ScriptOcalypse

Star 8

ScriptOcalypse 🏴‍☠️- Nothing here… just a lot of weird ideas with a chaotic mix of lemonade, boredom, and automation that somehow work.

penetration-testing pentesting ethical-hacking pentest-tool ethical-hacking-tools api-pentest api-security-testing api-pentesting
  • Updated Nov 19, 2025
  • Python

kasmya / API-Security-Analysis

Star 5

Multi layer API Security Analyzer built with FastAPI and ML anomaly detection.

machine-learning anomaly-detection api-security fastapi api-security-testing
  • Updated Oct 20, 2026
  • Python

owasp-offat / offat

Star 4

The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

owasp api-rest api-testing api-security hactoberfest api-security-testing offat owasp-offat
  • Updated May 16, 2026
  • Go

Traceableai / ast-action

Star 4

GitHub action to run Traceable Active Security Testing in GitHub workflows

security api-security api-security-testing
  • Updated Nov 2, 2026

nn0z / SecretHunter-JS

Star 3

A Python-powered reconnaissance tool that hunts exposed secrets, leaked credentials, and sensitive endpoints in web applications.

python injection web-scraping penetration-testing web-security bugbounty vulnerability-scanners security-scanner information-gathering security-tools reconnaissance vulnerability-scanner api-security secrets-detection javascript-analysis api-security-testing web-security-tool vulnerability-scanner-tools
  • Updated Oct 27, 2026
  • Python

ismailtsdln / endpointo

Star 3

High-performance API endpoint discovery tool for security professionals and bug bounty hunters.

bug-bounty bugbounty endpoint api-discovery endpoints api-security endpoint-security bugbounty-tools api-security-testing api-security-discovery
  • Updated Jan 7, 2026
  • Rust

Escape-Technologies / escape-rules

Star 3

A community-driven list of custom Escape rules. Test your API security with rules that automatically adapt for you.

security vulnerability-detection api-security 2024 api-security-testing escape-rules escape-custom-rules-templates
  • Updated Mar 14, 2024

bugsmirror / MASST

Star 2

Bugsmirror MASST (Mobile Application Security Suite and Tools) is a comprehensive platform for end-to-end mobile application security. It offers threat detection tools for static, runtime, dynamic API testing and red teaming; robust app shielding solution for threat mitigation; threat visibility dashboard; & AI powered insight in a single platform.

anti-tampering secure-communication redteaming jailbreak-detection mobile-application-security runtime-security mobile-application-security-testing root-detection runtime-security-testing static-application-security-testing threat-monitoring app-shielding api-security-testing runtime-application-self-protection threat-mitigation device-integrity threat-dashboard dynamic-application-security-testing threat-detection-response anti-reverse-engineering
  • Updated Sep 3, 2025

AutoPwnSec / APIFortify

Star 2

API Security Posture Assessment Platform — OWASP API Top 10 Coverage

nodejs express mongodb rest-api owasp penetration-testing appsec security-scanner owasp-top-10 api-security penetration-testing-tools api-security-testing
  • Updated Mar 2, 2026
  • JavaScript

miladrezanezhad / api-security-auditor-pro

Star 2

Professional API security auditing tool that detects rate limiting vulnerabilities and misconfigurations in REST APIs

python security-audit rate-limiting penetration-testing bug-bounty api-testing vulnerability-scanners security-tools devsecops api-security api-security-testing owasp-api-security
  • Updated May 30, 2026
  • Python
RestHound

Yuriibe / RestHound

Star 2

Lightweight CLI tool for scanning REST APIs for CORS issues, methods, and info leaks.

python cli rest-api enumeration infosec cli-app bugbounty pentest api-security cors-scanner bugbounty-tool infosectools api-security-testing
  • Updated Apr 14, 2025
  • Python

lunzai / gobrute

Star 1

A RESTful API brute-forcing tool in Go for ethical hacking practice. **Gobrute** is built for testing login passwords with multithreading, progress tracking, and customizable payloads, ideal for controlled environments like OWASP Juice Shop.

go golang rest-api owasp cybersecurity brute-force infosec pentesting ethical-hacking security-tools owasp-juice-shop owasp-top-10 password-cracking security-testing api-security ethical-hacking-tools api-security-testing password-testing
  • Updated Oct 29, 2024
  • Go

Add this topic to your repo

To associate your repository with the api-security-testing topic, visit your repo's landing page and select "manage topics."

Learn more

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.