I was searching for such resource to work as cheat sheet series and guide me through different attack scenarios for API attacks, didn’t find one, so decided to create it. We will have a reference of OWASP Top 10 project besides some other attacks that weren’t mentioned in the top 10 project.
☆15May 5, 2025Updated last year
Alternatives and similar repositories for AwesomeAPIAttacksCheatsheet
Users that are interested in AwesomeAPIAttacksCheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Training and certifications related to secure software development☆10Aug 9, 2026Updated last week
- When "403 Forbidden" stands between you and your target, 400OK breaks through with 22 bypass techniques and 4,400+ payloads.☆27Apr 4, 2026Updated 4 months ago
- AI-powered security scanner for Claude Code plugins and skills - LLM analysis, static rules, taint tracking, CI/PR integration, and inte…☆15Mar 1, 2026Updated 5 months ago
- powerfull pentesting tool to checking email by smtp command☆10Feb 29, 2024Updated 2 years ago
- ☆28Feb 10, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆18Nov 29, 2024Updated last year
- CVE-2025-4123 - Grafana Tool☆32Jun 4, 2025Updated last year
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 2 years ago
- Turn your Raspberry Pi Pico into a hacking device☆13Mar 7, 2024Updated 2 years ago
- Contains all the scripts and sample apps related to android in app protections.☆45Apr 19, 2026Updated 3 months ago
- SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …☆13Aug 22, 2021Updated 4 years ago
- Remake of the my current repo with more organization to it☆24Aug 10, 2026Updated last week
- A simple script that pushes a file to the Android device and hooks the relevant functions with Frida to override the application's behavi…☆15Oct 9, 2024Updated last year
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆22Mar 16, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repo will contain resources in different topics in cyber security especially in reverse engineering and malware analysis, such tools…☆10May 29, 2023Updated 3 years ago
- A GUI version of yt-dlp built in PyQt5 to make it easier to use.☆11Sep 17, 2023Updated 2 years ago
- Burp Suite plugin that dynamically generates Google 2FA codes for use in session handling rules (approved by PortSwigger for inclusion in…☆30Sep 4, 2025Updated 11 months ago
- ☆10Nov 7, 2022Updated 3 years ago
- PenTest and BugBounty 🕵️☆16Jul 11, 2026Updated last month
- My Obsidian Personal Knowledge Management System (Deployed with Zola + Netlify)☆15Jun 27, 2022Updated 4 years ago
- ☆13Mar 6, 2025Updated last year
- Testing tools for Oracle Forms☆15Oct 23, 2025Updated 9 months ago
- Windows 7 Professional 7601 Service Pack 1 is vulnerable to eternalblue exploit and while exploiting this myself i ran into a number of i…☆11Jun 27, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- UPX - the Ultimate Packer for eXecutables☆14Feb 28, 2017Updated 9 years ago
- A tiny demo app using SSL pinning to block HTTPS MitM interception☆14Aug 8, 2022Updated 4 years ago
- Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.☆17Aug 23, 2024Updated last year
- this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..☆13Aug 15, 2024Updated 2 years ago
- ☆16Oct 14, 2022Updated 3 years ago
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆29Jun 13, 2025Updated last year
- Apache Airflow < 2.4.0 DAG example_bash_operator RCE POC☆41Nov 19, 2022Updated 3 years ago
- Elastic.co products hands-on training materials☆12Sep 13, 2022Updated 3 years ago
- 0xJS is an AI-powered JavaScript Security Tool☆66Apr 16, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Stay on the beat with SubHound - receive notifications for new subdomains on Telegram and Discord! 🐶🎵☆17Jun 4, 2023Updated 3 years ago
- Learn what is NoSQL injection and how to find them ?☆10Jul 22, 2021Updated 5 years ago
- ☆54Jul 31, 2024Updated 2 years ago
- Additional Material for the Mobile Forensics Course☆18Jul 10, 2020Updated 6 years ago
- Keyhack - Golang API token/webhook validator☆16Mar 20, 2025Updated last year
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆31Oct 21, 2025Updated 9 months ago
- Go script to guess an API key / OAuth token found during pentest. CLI version of https://github.com/daffainfo/apiguesser-web/☆44Aug 28, 2022Updated 3 years ago