APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.
β380Mar 28, 2025Updated last year
Alternatives and similar repositories for apidetector
Users that are interested in apidetector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- πΉ Python project to bruteforce Apache Tomcat manager login with known-default credentialsβ95Mar 12, 2024Updated 2 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issuesβ375Jul 25, 2023Updated 3 years ago
- A Powerful Network Reconnaissance Tool for Security Professionalsβ107Dec 29, 2024Updated last year
- FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application aβ¦β169Oct 28, 2025Updated last year
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectorsβ91Feb 3, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Advanced Client-Side Prototype Pollution Scannerβ246Updated this week
- TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines foβ¦β427Apr 27, 2026Updated 6 months ago
- The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The β¦β679Updated this week
- hauditor is a tool designed to analyze the security headers returned by a web page.β175Jul 6, 2024Updated 2 years ago
- ngrok Collaborator Link β yet another Burp Collaborator alternative for free with ngrok.β116Jan 4, 2024Updated 2 years ago
- SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applicβ¦β467Mar 28, 2024Updated 2 years ago
- Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Builβ¦β248Feb 4, 2026Updated 9 months ago
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headersβ311Mar 31, 2024Updated 2 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.β312May 16, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer β’ AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Identify binaries with Authenticode digital signatures signed to an internal CA/domainβ41Feb 6, 2024Updated 2 years ago
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for cβ¦β445Dec 30, 2025Updated 10 months ago
- SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokensβ173Nov 29, 2024Updated last year
- Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitatiβ¦β478Jan 25, 2024Updated 2 years ago
- A tool to dump users's .plist on a Mac OS system and to convert them into a crackable hashβ52Oct 12, 2024Updated 2 years ago
- γπγA tool used to hunt down API key leaks in JS files and pagesβ947Mar 12, 2026Updated 7 months ago
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secretsβ1,597Mar 8, 2026Updated 7 months ago
- β550Jun 26, 2024Updated 2 years ago
- β126Aug 24, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform β’ AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Find authentication (authn) and authorization (authz) security bugs in web application routes.β279Sep 11, 2025Updated last year
- Go scanner to find web cache poisoning vulnerabilities in a list of URLsβ149Feb 21, 2024Updated 2 years ago
- β534Apr 29, 2024Updated 2 years ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Reβ¦β1,867Apr 17, 2026Updated 6 months ago
- SNMP Bash Script to discover valid community strings, dump basic information, check for write permission and check for RCE.β11Apr 27, 2024Updated 2 years ago
- Repo for hosting rayder workflowsβ66Aug 31, 2023Updated 3 years ago
- An IIS short filename enumeration toolβ1,236Nov 25, 2024Updated last year
- Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy serviβ¦β2,286Jan 6, 2026Updated 10 months ago
- A Slack bot phishing framework for Red Teaming exercisesβ167Apr 27, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail β’ AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable β¦β761Jul 10, 2026Updated 3 months ago
- Simplify your life with leak detection in JavaScript. NipeJS streamlines the use of regex, making it effortless to uncover potential leakβ¦β94Aug 9, 2024Updated 2 years ago
- Source code and examples for PassiveAggressionβ64Jun 6, 2024Updated 2 years ago
- A python script to scan for Apache Tomcat server vulnerabilities.β894Jan 12, 2026Updated 9 months ago
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.β948Aug 24, 2023Updated 3 years ago
- A Lightning-Fast DNS Resolver written in Rust π¦β72Nov 19, 2024Updated last year
- Docker Remote API Scanner and Exploitβ178Nov 13, 2023Updated 2 years ago