API-Security/APISandbox external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

API-Security/APISandbox

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/API-Security/APISandbox)

Close

API-Security / APISandboxView on GitHubMore

• External links
• Readme badge

Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.

☆423Aug 22, 2022Updated 4 years ago

Alternatives and similar repositories for APISandbox

Users that are interested in APISandbox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• API-Security / APIKit

  View on GitHub
  APIKit：Discovery, Scan and Audit APIs Toolkit All In One.
  ☆2,291Apr 2, 2024Updated 2 years ago
• UzJu / Cloud-Bucket-Leak-Detection-Tools

  View on GitHub
  六大云存储，泄露利用检测工具
  ☆1,267Mar 28, 2025Updated last year
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆758Apr 14, 2021Updated 5 years ago
• hudangwei / codemillx

  View on GitHub
  codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)
  ☆204Mar 19, 2022Updated 4 years ago
• BeichenDream / Kcon2021Code

  View on GitHub
  ☆276Oct 28, 2021Updated 5 years ago
• Proton VPN Special Offer - Get 70% off • Ad
  Special partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
• SummerSec / SpringBootExploit

  View on GitHub
  项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。
  ☆1,890Jan 15, 2024Updated 2 years ago
• whwlsfb / Log4j2Scan

  View on GitHub
  Log4j2 RCE Passive Scanner plugin for BurpSuite
  ☆832Aug 4, 2023Updated 3 years ago
• safe6Sec / Fastjson

  View on GitHub
  Fastjson姿势技巧集合
  ☆1,860Oct 20, 2023Updated 3 years ago
• Firebasky / CodeqlLearn

  View on GitHub
  记录学习codeql的过程
  ☆397Jun 9, 2023Updated 3 years ago
• opensec-cn / conote-community

  View on GitHub
  Conote 综合安全测试平台社区版。
  ☆375Aug 15, 2024Updated 2 years ago
• bit4woo / Fiora

  View on GitHub
  Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。
  ☆1,279Apr 10, 2026Updated 6 months ago
• lijiejie / swagger-exp

  View on GitHub
  A Swagger API Exploit
  ☆1,378Jun 7, 2024Updated 2 years ago
• wyzxxz / heapdump_tool

  View on GitHub
  heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等
  ☆1,457May 21, 2024Updated 2 years ago
• NyDubh3 / Pentesting-Active-Directory-CN

  View on GitHub
  域渗透脑图中文翻译版
  ☆278Sep 18, 2021Updated 5 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• veo / wsMemShell

  View on GitHub
  WebSocket 内存马/Webshell，一种新型内存马/WebShell技术
  ☆1,486Apr 10, 2023Updated 3 years ago
• safe6Sec / CodeqlNote

  View on GitHub
  Codeql学习笔记
  ☆901Apr 25, 2022Updated 4 years ago
• threedr3am / ZhouYu

  View on GitHub
  （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）
  ☆615Dec 29, 2021Updated 4 years ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,014May 21, 2024Updated 2 years ago
• bit4woo / domain_hunter_pro

  View on GitHub
  domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
  ☆2,156Oct 23, 2026Updated 2 weeks ago
• pmiaowu / BurpShiroPassiveScan

  View on GitHub
  一款基于BurpSuite的被动式shiro检测插件
  ☆1,806Dec 14, 2022Updated 3 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,247Feb 17, 2025Updated last year
• no-one-sec / code-phish

  View on GitHub
  JetBrains系列产品.idea钓鱼反制红队
  ☆326Jan 27, 2026Updated 9 months ago
• woodpecker-framework / woodpecker-framework-release

  View on GitHub
  高危漏洞精准检测与深度利用框架
  ☆1,463Jan 8, 2023Updated 3 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• SummerSec / LookupInterface

  View on GitHub
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆166Apr 10, 2022Updated 4 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,394Jan 18, 2022Updated 4 years ago
• SummerSec / JavaLearnVulnerability

  View on GitHub
  Java漏洞学习笔记 Deserialization Vulnerability
  ☆943Jun 14, 2023Updated 3 years ago
• neargle / re0-kubernetes-sec-archive

  View on GitHub
  [WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐
  ☆3,171Nov 6, 2025Updated last year
• Schira4396 / VcenterKiller

  View on GitHub
  一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…
  ☆1,483Apr 25, 2024Updated 2 years ago
• xiecat / goblin

  View on GitHub
  一款适用于红蓝对抗中的仿真钓鱼系统
  ☆1,543May 30, 2023Updated 3 years ago
• LandGrey / ClassHound

  View on GitHub
  利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码
  ☆709May 10, 2021Updated 5 years ago
• threedr3am / learnjavabug

  View on GitHub
  Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…
  ☆2,682Mar 14, 2024Updated 2 years ago
• kelvinBen / AppInfoScanner

  View on GitHub
  一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN…
  ☆3,580Oct 15, 2026Updated 3 weeks ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• safe6Sec / PentestDB

  View on GitHub
  各种数据库的利用姿势
  ☆1,030Jan 3, 2025Updated last year
• jayus0821 / swagger-hack

  View on GitHub
  自动化爬取并自动测试所有swagger接口
  ☆1,187Dec 1, 2025Updated 11 months ago
• rtcatc / Packer-Fuzzer

  View on GitHub
  Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack…
  ☆3,254May 24, 2024Updated 2 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,007Oct 15, 2020Updated 6 years ago
• phith0n / JavaThings

  View on GitHub
  Share Things Related to Java - Java安全漫谈笔记相关内容
  ☆2,034Apr 9, 2025Updated last year
• fnmsd / MySQL_Fake_Server

  View on GitHub
  MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize
  ☆1,376Nov 18, 2021Updated 4 years ago
• shmilylty / netspy

  View on GitHub
  netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）
  ☆2,238Jul 25, 2023Updated 3 years ago