Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!
☆576Jan 29, 2024Updated 2 years ago
Alternatives and similar repositories for openapi-fuzzer
Users that are interested in openapi-fuzzer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security…☆2,929Jun 10, 2026Updated last month
- CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with min…☆1,362Jul 3, 2026Updated 3 weeks ago
- Fuzz test your application using your OpenAPI or Swagger API definition without coding☆467Apr 13, 2026Updated 3 months ago
- OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.☆110Dec 6, 2022Updated 3 years ago
- Simple fuzzer for OpenAPI 3 specification based APIs☆23Feb 16, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Proof Of Concept code for OctoberCMS Auth Bypass CVE-2021-32648☆12Jan 14, 2022Updated 4 years ago
- Automagically reverse-engineer REST APIs via capturing traffic☆9,561Updated this week
- Port OpenAPI Specs to Postman Collections, inject test suite and run via Newman 👨🏽🚀☆686May 23, 2026Updated 2 months ago
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆280Sep 11, 2025Updated 10 months ago
- An OpenAPI client generator☆978Updated this week
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆227Apr 2, 2026Updated 3 months ago
- Slice and dice logs on the command line☆3,747Feb 5, 2026Updated 5 months ago
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆15,999Updated this week
- jq for binary formats - tool, language and decoders for working with binary and text formats☆10,535Jul 15, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Catch API bugs before your users do☆3,483Updated this week
- Kusk Gen generates Ingress-controller configurations from your OpenAPI definition☆173Oct 17, 2022Updated 3 years ago
- A flexible JSON/YAML linter for creating automated style guides, with baked in support for OpenAPI (v3.1, v3.0, and v2.0), Arazzo v1.0, a…☆3,159Updated this week
- An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API securit…☆576Oct 8, 2024Updated last year
- Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validati…☆1,233Oct 25, 2024Updated last year
- Find unicode codepoints to use in normalisation and transformation attacks.☆11Mar 15, 2021Updated 5 years ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆864Updated this week
- A static analysis tool for securing Go code☆2,159Jan 23, 2024Updated 2 years ago
- Browser extension that generates API specs for any app or website☆4,304Mar 19, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A tree-sitter based AST difftool to get meaningful semantic diffs☆2,390Updated this week
- Visualize the output of the unix lsof to see which files are open by which processes☆15Mar 2, 2025Updated last year
- A highly customizable Changelog Generator that follows Conventional Commit specifications ⛰️☆12,035Updated this week
- The effort to explore the future of the OpenAPI Specification is known as "Moonwalk." It includes 4.x considerations but also strives to …☆350Apr 8, 2025Updated last year
- Search algorithms written in Rust☆11Feb 15, 2018Updated 8 years ago
- ☆24Apr 21, 2022Updated 4 years ago
- REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and defau…☆263Jan 13, 2022Updated 4 years ago
- The Doctor. Just the doctor, no more, no less. The OpenAPI all in one supercharged go toolkit☆41Jul 12, 2026Updated last week
- compiler from JSON Schema into idiomatic Rust types☆877Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆19Jan 24, 2023Updated 3 years ago
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned ent…☆2,223Feb 23, 2026Updated 5 months ago
- Tfsec is now part of Trivy☆7,019Mar 25, 2026Updated 3 months ago
- 🤖 Just a command runner☆34,919Updated this week
- A syntax-highlighting pager for git, diff, grep, rg --json, and blame output☆31,541Updated this week
- a structural diff that understands syntax 🟥🟩☆25,681Updated this week
- A simple remote scanner for Atlassian Jira☆121Jan 30, 2023Updated 3 years ago