Alternatives and similar repositories for rest-api-fuzz-testing:

Users that are interested in rest-api-fuzz-testing are comparing it to the libraries listed below

• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆218Updated 9 months ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆141Updated 11 months ago
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆329Updated last month
• MozillaSecurity / grizzly
  A cross-platform browser fuzzing framework
  ☆306Updated last week
• google / clusterfuzzlite
  ClusterFuzzLite - Simple continuous fuzzing that runs in CI.
  ☆469Updated 2 months ago
• KissPeter / APIFuzzer
  Fuzz test your application using your OpenAPI or Swagger API definition without coding
  ☆439Updated last month
• planetlevel / jot
  Java Observability Toolkit
  ☆61Updated 8 months ago
• microsoft / codeql-container
  Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.
  ☆114Updated last year
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆140Updated 10 months ago
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆345Updated 4 years ago
• microsoft / threat-modeling-templates
  Microsoft Threat Modeling Template files
  ☆183Updated 2 years ago
• Teebytes / TnT-Fuzzer
  OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
  ☆111Updated 2 years ago
• microsoft / sarif-vscode-extension
  SARIF Microsoft Visual Studio Code extension
  ☆113Updated 4 months ago
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆179Updated 6 years ago
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆306Updated 9 months ago
• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆273Updated 2 years ago
• fuzzitdev / fuzzit
  CLI to integrate continuous fuzzing with Fuzzit (no longer available)
  ☆222Updated 4 years ago
• Microsvuln / Awesome-AFL
  A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers and AFL-fuzzing tutorials
  ☆541Updated last year
• google / path-auditor
  ☆251Updated 4 years ago
• elttam / semgrep-rules
  ☆180Updated 3 months ago
• microsoft / sarif-tutorials
  User-friendly documentation for the SARIF file format.
  ☆291Updated last year
• google / security-crawl-maze
  Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link …
  ☆157Updated last year
• softwaresecured / secure-code-review-checklist
  A starter secure code review checklist
  ☆180Updated 6 years ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆138Updated 3 years ago
• tprynn / web-methodology
  Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
  ☆202Updated 3 months ago
• AppThreat / sast-scan
  Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…
  ☆147Updated 4 years ago
• ossf / fuzz-introspector
  Fuzz Introspector -- introspect, extend and optimise fuzzers
  ☆397Updated this week
• microsoft / sarif-web-component
  A React-based component for viewing SARIF files.
  ☆91Updated 3 months ago
• microsoft / restler-fuzzer
  RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security…
  ☆2,673Updated last week
• cve-search / git-vuln-finder
  Finding potential software vulnerabilities from git commit messages
  ☆408Updated last year