I was searching for such resource to work as cheat sheet series and guide me through different attack scenarios for API attacks, didn’t find one, so decided to create it. We will have a reference of OWASP Top 10 project besides some other attacks that weren’t mentioned in the top 10 project.
☆15May 5, 2025Updated last year
Alternatives and similar repositories for AwesomeAPIAttacksCheatsheet
Users that are interested in AwesomeAPIAttacksCheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Training and certifications related to secure software development☆11Aug 9, 2026Updated 2 months ago
- AI-powered security scanner for Claude Code plugins and skills - LLM analysis, static rules, taint tracking, CI/PR integration, and inte…☆15Mar 1, 2026Updated 8 months ago
- Unlock FRP MediaTek devices☆12Jan 6, 2024Updated 2 years ago
- ☆18Nov 29, 2024Updated last year
- ☆28Feb 10, 2026Updated 8 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- This repository is the store of all the main points and suggestions I have come across on LinkedIn, podcasts and YouTube related to findi…☆11Jun 4, 2021Updated 5 years ago
- ☆35Jun 18, 2026Updated 4 months ago
- Methodologies and useful commands for taking the OSCP exam☆20Nov 21, 2025Updated 11 months ago
- SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …☆13Aug 22, 2021Updated 5 years ago
- CVE-2025-4123 - Grafana Tool☆33Jun 4, 2025Updated last year
- LLM-driven reverse engineering knowledge base custodian — ingests blogs, pentest findings, and malware write-ups into a structured, anti-…☆15Updated this week
- powerfull pentesting tool to checking email by smtp command☆10Feb 29, 2024Updated 2 years ago
- A DEX → Java decompiler in pure Rust.☆19Oct 25, 2026Updated last week
- Contains all the scripts and sample apps related to android in app protections.☆47Apr 19, 2026Updated 6 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 🏗 Tech profile lookup CLI with data from BuiltWith.com☆12Apr 17, 2016Updated 10 years ago
- Ghidra plugin to identify obfuscated code and other interesting code constructs☆20Jul 1, 2026Updated 4 months ago
- Educational AI security platform featuring 10 OWASP LLM Top 10 CTF challenges. This lite fork adds OpenAI API support, redesigns challeng…☆20Feb 19, 2026Updated 8 months ago
- Javascript sourcemaps enumeration tool☆17Dec 19, 2024Updated last year
- Turn your Raspberry Pi Pico into a hacking device☆13Mar 7, 2024Updated 2 years ago
- Learn what is NoSQL injection and how to find them ?☆10Jul 22, 2021Updated 5 years ago
- LSPosed module that makes an Android emulator look like a real phone. Hides emulator traces from the apps you pick.☆19Oct 21, 2026Updated 2 weeks ago
- A biweekly secure code review challenge series, full working apps, based on real-world vulnerabilities.☆13Updated this week
- A script to root your Android Studio Virtual Device (AVD) with KernelSU | 用于在 Android Studio 虚拟设备 (AVD) 上安装 KernelSU 的自动化工具☆14Sep 30, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- UPX - the Ultimate Packer for eXecutables☆14Feb 28, 2017Updated 9 years ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- Amr's ATM Assessment - read-only PowerShell collector for authorised NCR Personas / APTRA ATM security assessments. 15 phases: XFS servic…☆15Oct 4, 2026Updated last month
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago
- a physical pentesting toolkit on a regular Raspberry Pi Pico☆15Jun 25, 2024Updated 2 years ago
- Holy Quran SQL database dump for use with Sanad.☆11Mar 21, 2016Updated 10 years ago
- Bitcoin Computer hashfs☆16Jul 12, 2016Updated 10 years ago
- Add Cloudflare warp-plus-data to your account.☆10Apr 10, 2024Updated 2 years ago
- 🔮 Uncover parts of mutuals followers of an instagram private account☆16Mar 31, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- IIS 模块后门☆12Feb 23, 2023Updated 3 years ago
- ☆13Mar 6, 2025Updated last year
- Tool to check the CloudTrail configuration and the services where trails are sent, to detect potential attacks to CloudTrail logging.☆13May 25, 2024Updated 2 years ago
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆13Mar 14, 2026Updated 7 months ago
- A tiny demo app using SSL pinning to block HTTPS MitM interception☆14Aug 8, 2022Updated 4 years ago
- BlackBox is a virtual engine, it can clone and run virtual application on Android, users don't have to install APK file to run the appli…☆12Nov 3, 2022Updated 4 years ago
- Sarahah XSS Explotiation Tool☆17Aug 19, 2017Updated 9 years ago