microsoft / rest-api-fuzz-testing
REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows
☆263Updated 3 years ago
Alternatives and similar repositories for rest-api-fuzz-testing
Users that are interested in rest-api-fuzz-testing are comparing it to the libraries listed below
Sorting:
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆220Updated last year
- Java Observability Toolkit☆61Updated 11 months ago
- Collection of tools for analyzing open source packages.☆336Updated last week
- Microsoft Threat Modeling Template files☆187Updated 2 years ago
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆142Updated last year
- SARIF Microsoft Visual Studio Code extension☆114Updated 3 weeks ago
- OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.☆111Updated 2 years ago
- OpenSSF Security Tooling Working Group☆309Updated 11 months ago
- threatspec - continuous threat modeling, through code☆357Updated 4 years ago
- ClusterFuzzLite - Simple continuous fuzzing that runs in CI.☆481Updated 5 months ago
- RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security…☆2,721Updated last month
- Fuzz test your application using your OpenAPI or Swagger API definition without coding☆445Updated 2 months ago
- Software Component Verification Standard (SCVS)☆144Updated last month
- .NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs…☆201Updated this week
- A cross-platform browser fuzzing framework☆307Updated 3 weeks ago
- Security scanning & static analysis tool☆94Updated 6 months ago
- DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.☆941Updated 3 weeks ago
- A Continuous Threat Modeling methodology☆319Updated 2 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆179Updated 6 years ago
- OWASP Foundation Threat Dragon Project Web Repository☆80Updated last week
- A React-based component for viewing SARIF files.☆94Updated 6 months ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆279Updated last month
- The DevSecOps toolset for REST APIs☆274Updated 2 years ago
- A starter secure code review checklist☆182Updated 6 years ago
- Scans your project to determine what components you use☆477Updated last week
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆148Updated 4 years ago
- Desktop variant of OWASP Threat Dragon☆77Updated 3 years ago
- App that simplifies building decision trees to model adverse scenarios☆209Updated 10 months ago
- This project is about creating and publishing threat model examples.☆419Updated 3 years ago
- Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM☆194Updated 6 years ago