Alternatives and similar repositories for rest-api-fuzz-testing

Users that are interested in rest-api-fuzz-testing are comparing it to the libraries listed below

• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆222Updated last year
• microsoft / OSSGadget
  Collection of tools for analyzing open source packages.
  ☆342Updated 3 weeks ago
• planetlevel / jot
  Java Observability Toolkit
  ☆61Updated last year
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆145Updated last year
• microsoft / sarif-vscode-extension
  SARIF Microsoft Visual Studio Code extension
  ☆117Updated 2 weeks ago
• microsoft / sarif-tutorials
  User-friendly documentation for the SARIF file format.
  ☆309Updated last year
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆147Updated 2 months ago
• KissPeter / APIFuzzer
  Fuzz test your application using your OpenAPI or Swagger API definition without coding
  ☆449Updated 3 months ago
• microsoft / threat-modeling-templates
  Microsoft Threat Modeling Template files
  ☆189Updated 2 years ago
• Teebytes / TnT-Fuzzer
  OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
  ☆111Updated 2 years ago
• AppThreat / sast-scan
  Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…
  ☆148Updated 4 years ago
• threatspec / threatspec
  threatspec - continuous threat modeling, through code
  ☆358Updated 4 years ago
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆179Updated 6 years ago
• google / path-auditor
  ☆251Updated 4 years ago
• trailofbits / audit-kubernetes
  k8s audit repo
  ☆228Updated 5 years ago
• MozillaSecurity / grizzly
  A cross-platform browser fuzzing framework
  ☆308Updated last week
• OWASP / threat-dragon-desktop
  Desktop variant of OWASP Threat Dragon
  ☆77Updated 3 years ago
• google / clusterfuzzlite
  ClusterFuzzLite - Simple continuous fuzzing that runs in CI.
  ☆492Updated 6 months ago
• ajinabraham / libsast
  Generic SAST Library
  ☆131Updated last week
• elttam / semgrep-rules
  ☆196Updated 7 months ago
• thought-machine / dracon
  Security scanning & static analysis tool
  ☆94Updated 8 months ago
• xiaofen9 / Lynx
  A Node.js vulnerability finding tool.
  ☆95Updated 4 years ago
• ossf / wg-security-tooling
  OpenSSF Security Tooling Working Group
  ☆311Updated last year
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆282Updated last week
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆844Updated last year
• trailofbits / it-depends
  A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositorie…
  ☆364Updated 6 months ago
• segmentio / threat-modeling-training
  Segment's Threat Modeling training for our engineers
  ☆243Updated 4 years ago
• Autodesk / continuous-threat-modeling
  A Continuous Threat Modeling methodology
  ☆321Updated 3 years ago
• microsoft / codeql-container
  Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.
  ☆119Updated last year
• microsoft / restler-fuzzer
  RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security…
  ☆2,743Updated 2 months ago