I was searching for such resource to work as cheat sheet series and guide me through different attack scenarios for API attacks, didn’t find one, so decided to create it. We will have a reference of OWASP Top 10 project besides some other attacks that weren’t mentioned in the top 10 project.
☆15May 5, 2025Updated last year
Alternatives and similar repositories for AwesomeAPIAttacksCheatsheet
Users that are interested in AwesomeAPIAttacksCheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Training and certifications related to secure software development☆10Aug 9, 2026Updated 3 weeks ago
- AI-powered security scanner for Claude Code plugins and skills - LLM analysis, static rules, taint tracking, CI/PR integration, and inte…☆15Mar 1, 2026Updated 6 months ago
- FPV Screen conversion☆10Sep 7, 2018Updated 7 years ago
- powerfull pentesting tool to checking email by smtp command☆10Feb 29, 2024Updated 2 years ago
- ☆28Feb 10, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2025-4123 - Grafana Tool☆32Jun 4, 2025Updated last year
- Unlock FRP MediaTek devices☆12Jan 6, 2024Updated 2 years ago
- Run Kali NetHunter (GUI + CLI) on Android via Termux — rootless, portable, and perfect for mobile pentesting.☆16Jun 19, 2025Updated last year
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago
- Turn your Raspberry Pi Pico into a hacking device☆13Mar 7, 2024Updated 2 years ago
- Methodologies and useful commands for taking the OSCP exam☆19Nov 21, 2025Updated 9 months ago
- SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …☆13Aug 22, 2021Updated 5 years ago
- Build adb and fastboot with NDK.☆15Aug 8, 2020Updated 6 years ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Educational AI security platform featuring 10 OWASP LLM Top 10 CTF challenges. This lite fork adds OpenAI API support, redesigns challeng…☆20Feb 19, 2026Updated 6 months ago
- This repo will contain resources in different topics in cyber security especially in reverse engineering and malware analysis, such tools…☆10May 29, 2023Updated 3 years ago
- Burp Suite plugin that dynamically generates Google 2FA codes for use in session handling rules (approved by PortSwigger for inclusion in…☆31Sep 4, 2025Updated last year
- ☆10Nov 7, 2022Updated 3 years ago
- PenTest and BugBounty 🕵️☆16Aug 18, 2026Updated 2 weeks ago
- My Obsidian Personal Knowledge Management System (Deployed with Zola + Netlify)☆15Jun 27, 2022Updated 4 years ago
- ☆13Mar 6, 2025Updated last year
- Testing tools for Oracle Forms☆16Oct 23, 2025Updated 10 months ago
- Sarahah XSS Explotiation Tool☆17Aug 19, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- UPX - the Ultimate Packer for eXecutables☆14Feb 28, 2017Updated 9 years ago
- ☆15Jun 19, 2024Updated 2 years ago
- A tiny demo app using SSL pinning to block HTTPS MitM interception☆14Aug 8, 2022Updated 4 years ago
- this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..☆13Aug 15, 2024Updated 2 years ago
- ☆16Oct 14, 2022Updated 3 years ago
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆31Jun 13, 2025Updated last year
- 🔮 Uncover parts of mutuals followers of an instagram private account☆16Mar 31, 2022Updated 4 years ago
- Elastic.co products hands-on training materials☆12Sep 13, 2022Updated 3 years ago
- Learn what is NoSQL injection and how to find them ?☆10Jul 22, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Stay on the beat with SubHound - receive notifications for new subdomains on Telegram and Discord! 🐶🎵☆17Jun 4, 2023Updated 3 years ago
- Additional Material for the Mobile Forensics Course☆18Jul 10, 2020Updated 6 years ago
- ☆13Jan 30, 2025Updated last year
- Keyhack - Golang API token/webhook validator☆16Mar 20, 2025Updated last year
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆31Oct 21, 2025Updated 10 months ago
- Go script to guess an API key / OAuth token found during pentest. CLI version of https://github.com/daffainfo/apiguesser-web/☆44Aug 28, 2022Updated 4 years ago
- 蜜罐检测工具，支持自动化URL去重、多线程控制及智能速率限制。可识别伪装服务。☆16Jun 5, 2025Updated last year