I was searching for such resource to work as cheat sheet series and guide me through different attack scenarios for API attacks, didn’t find one, so decided to create it. We will have a reference of OWASP Top 10 project besides some other attacks that weren’t mentioned in the top 10 project.
☆15May 5, 2025Updated last year
Alternatives and similar repositories for AwesomeAPIAttacksCheatsheet
Users that are interested in AwesomeAPIAttacksCheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- KEV-gated continual-learning XSS specialist with execution-authoritative browser verification☆156Sep 28, 2026Updated 2 weeks ago
- Training and certifications related to secure software development☆10Aug 9, 2026Updated 2 months ago
- When "403 Forbidden" stands between you and your target, 400OK breaks through with 22 bypass techniques and 4,400+ payloads.☆29Apr 4, 2026Updated 6 months ago
- A native APK and DEX decompiler written in Rust☆157Updated this week
- AI-powered security scanner for Claude Code plugins and skills - LLM analysis, static rules, taint tracking, CI/PR integration, and inte…☆15Mar 1, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆316Sep 30, 2026Updated 2 weeks ago
- Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session…☆127Aug 7, 2026Updated 2 months ago
- FPV Screen conversion☆10Sep 7, 2018Updated 8 years ago
- MCP server for Frida.☆58Updated this week
- powerfull pentesting tool to checking email by smtp command☆10Feb 29, 2024Updated 2 years ago
- ☆28Feb 10, 2026Updated 8 months ago
- Your Google services (RCS, Google Wallet, DroidGuard timestamps, Play Integrity attestations, Play Protect Certification) read on-device.…☆83Updated this week
- ☆18Nov 29, 2024Updated last year
- A KernelSU module that provides alternative adb server over local network☆81Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2025-4123 - Grafana Tool☆32Jun 4, 2025Updated last year
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago
- Methodologies and useful commands for taking the OSCP exam☆20Nov 21, 2025Updated 10 months ago
- Tool for MSSQL relay audit and abuse☆63Jul 28, 2026Updated 2 months ago
- FRP Bypass.☆10Oct 29, 2024Updated last year
- Build adb and fastboot with NDK.☆16Aug 8, 2020Updated 6 years ago
- Contains all the scripts and sample apps related to android in app protections.☆46Apr 19, 2026Updated 5 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- Automating the SQL Injection through Google dorks.☆15Sep 30, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A GUI version of yt-dlp built in PyQt5 to make it easier to use.☆11Sep 17, 2023Updated 3 years ago
- PenTest and BugBounty 🕵️☆17Sep 15, 2026Updated last month
- Educational AI security platform featuring 10 OWASP LLM Top 10 CTF challenges. This lite fork adds OpenAI API support, redesigns challeng…☆20Feb 19, 2026Updated 7 months ago
- BlackBox is a virtual engine, it can clone and run virtual application on Android, users don't have to install APK file to run the appli…☆12Nov 3, 2022Updated 3 years ago
- Burp Suite plugin that dynamically generates Google 2FA codes for use in session handling rules (approved by PortSwigger for inclusion in…☆31Sep 4, 2025Updated last year
- Testing tools for Oracle Forms☆16Oct 23, 2025Updated 11 months ago
- Windows 7 Professional 7601 Service Pack 1 is vulnerable to eternalblue exploit and while exploiting this myself i ran into a number of i…☆11Jun 27, 2021Updated 5 years ago
- My Obsidian Personal Knowledge Management System (Deployed with Zola + Netlify)☆15Jun 27, 2022Updated 4 years ago
- This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, i…☆17Sep 18, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Sarahah XSS Explotiation Tool☆17Aug 19, 2017Updated 9 years ago
- Bitcoin Computer hashfs☆16Jul 12, 2016Updated 10 years ago
- UPX - the Ultimate Packer for eXecutables☆14Feb 28, 2017Updated 9 years ago
- A tiny demo app using SSL pinning to block HTTPS MitM interception☆14Aug 8, 2022Updated 4 years ago
- ☆13Mar 6, 2025Updated last year
- ☆16Oct 14, 2022Updated 4 years ago
- A simple script that pushes a file to the Android device and hooks the relevant functions with Frida to override the application's behavi…☆15Oct 9, 2024Updated 2 years ago