microsoft / rest-api-fuzz-testingLinks
REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows
☆263Updated 3 years ago
Alternatives and similar repositories for rest-api-fuzz-testing
Users that are interested in rest-api-fuzz-testing are comparing it to the libraries listed below
Sorting:
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆225Updated last year
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆151Updated last year
- Collection of tools for analyzing open source packages.☆349Updated 3 weeks ago
- SARIF Microsoft Visual Studio Code extension☆119Updated 3 weeks ago
- Java Observability Toolkit☆62Updated last year
- Microsoft Threat Modeling Template files☆193Updated 2 years ago
- The DevSecOps toolset for REST APIs☆274Updated 2 years ago
- Fuzz test your application using your OpenAPI or Swagger API definition without coding☆456Updated 5 months ago
- ☆252Updated 4 years ago
- DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.☆958Updated 3 weeks ago
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆149Updated 4 years ago
- A React-based component for viewing SARIF files.☆98Updated 9 months ago
- threatspec - continuous threat modeling, through code☆366Updated 4 years ago
- ClusterFuzzLite - Simple continuous fuzzing that runs in CI.☆498Updated 8 months ago
- OWASP IoT Security Verification Standard (ISVS)☆144Updated 2 years ago
- OpenSSF Security Tooling Working Group☆313Updated last month
- Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link …☆162Updated last year
- A cross-platform browser fuzzing framework☆310Updated 2 weeks ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆181Updated 6 years ago
- User-friendly documentation for the SARIF file format.☆318Updated last year
- A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…☆368Updated last week
- Software Component Verification Standard (SCVS)☆149Updated 4 months ago
- Desktop variant of OWASP Threat Dragon☆77Updated 4 years ago
- OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.☆111Updated 2 years ago
- Finding potential software vulnerabilities from git commit messages☆417Updated last year
- Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.☆119Updated last year
- Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning …☆42Updated last year
- RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security…☆2,778Updated this week
- IriusRisk Community☆66Updated last year
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆282Updated 2 weeks ago