akto-api-security / tests-libraryLinks
Community generated list of API security tests to find OWASP top10, HackerOne top 10 vulnerabilities
☆41Updated this week
Alternatives and similar repositories for tests-library
Users that are interested in tests-library are comparing it to the libraries listed below
Sorting:
- Performing automated scan using Burp Suite Pro & Vmware Burp Rest API☆52Updated 3 years ago
- A list of threat sinks used in the manual security source code review for application security☆76Updated 2 years ago
- yataf extracts secrets and paths from files or urls - its best used against javascript files☆52Updated last year
- Create your own recon & vulnerability scanner with Trickest and GitHub☆48Updated 2 years ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆44Updated last year
- List all public repositories for (valid) GitHub usernames☆76Updated 2 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆31Updated 2 years ago
- An extension to use Semgrep inside Burp Suite.☆89Updated 8 months ago
- Community Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own☆76Updated last week
- 🔭 Collection of regexp pattern for security passive scanning☆116Updated 2 years ago
- Monitoring the Cloud Landscape☆92Updated last week
- Execute Trickest workflows right from your terminal☆95Updated 2 months ago
- Improve automated and semi-automated active scanning in Burp Pro☆64Updated 8 months ago
- ☆29Updated 3 years ago
- Bcheck scripts for Burp☆28Updated last year
- Dependency Confusion Security Testing Tool☆51Updated 3 years ago
- Security Advisories☆35Updated 3 months ago
- A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabiliti…☆120Updated 2 years ago
- Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.☆73Updated 3 years ago
- Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.☆112Updated 3 years ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆36Updated 11 months ago
- OWASP ASVS Security Evaluation Templates with Nuclei☆42Updated 2 months ago
- This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response ma…☆81Updated 2 years ago
- Let's check if your target is vulnerable for client side prototype pollution.☆65Updated 2 years ago
- 🚀 Sling Shot R3con: Automate Your Bug Bounty and Pentest Reconnaissance with Project Discovery tools 🎯☆25Updated 2 years ago
- A very vulnerable implementation of a GraphQL API.☆61Updated 4 years ago
- vīlicus is a bug bounty api dashboard☆42Updated 2 years ago
- ☆95Updated 4 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Updated 3 years ago
- ☆88Updated last year