Alternatives and similar repositories for rest-api-fuzz-testing

Users that are interested in rest-api-fuzz-testing are comparing it to the libraries listed below

• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆227Updated last year
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆153Updated last year
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆349Updated last month
• microsoft / sarif-vscode-extension
  SARIF Microsoft Visual Studio Code extension
  ☆122Updated 2 months ago
• google / clusterfuzzlite
  ClusterFuzzLite - Simple continuous fuzzing that runs in CI.
  ☆504Updated 10 months ago
• microsoft / sarif-tutorials
  User-friendly documentation for the SARIF file format.
  ☆328Updated last year
• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆276Updated 2 years ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆150Updated 6 months ago
• microsoft / codeql-container
  Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.
  ☆119Updated last year
• AppThreat / sast-scan
  Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…
  ☆149Updated 5 years ago
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆368Updated 4 years ago
• microsoft / threat-modeling-templates
  Microsoft Threat Modeling Template files
  ☆195Updated 2 years ago
• planetlevel / jot
  Java Observability Toolkit
  ☆62Updated last year
• microsoft / DevSkim
  DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
  ☆962Updated last month
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆372Updated last week
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆94Updated last year
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆318Updated 3 months ago
• microsoft / sarif-web-component
  A React-based component for viewing SARIF files.
  ☆98Updated 11 months ago
• KissPeter / APIFuzzer
  Fuzz test your application using your OpenAPI or Swagger API definition without coding
  ☆459Updated 7 months ago
• OWASP / IoT-Security-Verification-Standard-ISVS
  OWASP IoT Security Verification Standard (ISVS)
  ☆145Updated 3 weeks ago
• google / security-crawl-maze
  Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link …
  ☆164Updated last year
• google / path-auditor
  ☆252Updated 4 years ago
• Teebytes / TnT-Fuzzer
  OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
  ☆111Updated 2 years ago
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆182Updated 6 years ago
• spoofzu / jvmxray
  Externalize Java application access to protected resources as log messages.
  ☆43Updated this week
• MozillaSecurity / grizzly
  A cross-platform browser fuzzing framework
  ☆313Updated 2 weeks ago
• Contrast-Security-OSS / safelog4j
  Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning …
  ☆43Updated 2 weeks ago
• microsoft / sarif-sdk
  .NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs…
  ☆207Updated 2 weeks ago
• advanced-security / codeql-workshops-staging
  Original workshops and staging area for new ones
  ☆16Updated 3 months ago
• cve-search / git-vuln-finder
  Finding potential software vulnerabilities from git commit messages
  ☆417Updated 2 years ago