BBVA / apicheck
The DevSecOps toolset for REST APIs
☆271Updated last year
Related projects ⓘ
Alternatives and complementary repositories for apicheck
- Automate security tests using Burp Suite.☆223Updated 5 months ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆168Updated 2 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆177Updated 5 years ago
- vulnerable single sign on☆147Updated 3 months ago
- A simple web app that helps developers understand the ASVS requirements.☆154Updated 8 months ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆98Updated 11 months ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆274Updated this week
- Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and…☆269Updated 2 months ago
- ADAPT is a tool that performs automated Penetration Testing for WebApps.☆187Updated 5 years ago
- Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Applica…☆481Updated 6 years ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆133Updated 4 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆347Updated 4 years ago
- Container Security Verification Standard☆57Updated 5 years ago
- Hayat is a script for report and analyze Google Cloud Platform resources.☆79Updated 4 years ago
- AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.☆241Updated 2 years ago
- Find cloud assets that no one wants exposed 🔎 ☁️☆332Updated 4 years ago
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆213Updated 6 months ago
- 🏰 A Python script for AWS S3 bucket enumeration.☆139Updated last year
- The Secure Coding Framework☆262Updated 4 years ago
- OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development☆175Updated 3 months ago
- threatspec - continuous threat modeling, through code☆332Updated 3 years ago
- Benchmarking repo for secrets scanning☆229Updated 3 months ago
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆105Updated last year
- Finding exposed secrets and personal data in GitLab☆196Updated this week
- Cloud-related research releases from the Rhino Security Labs team.☆356Updated 4 years ago
- barq: The AWS Cloud Post Exploitation framework!☆386Updated 2 years ago
- An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.☆180Updated this week
- Collection of links to Security stuff☆115Updated 3 weeks ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago