RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
☆2,926Jun 10, 2026Updated last month
Alternatives and similar repositories for restler-fuzzer
Users that are interested in restler-fuzzer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and defau…☆263Jan 13, 2022Updated 4 years ago
- Fuzz test your application using your OpenAPI or Swagger API definition without coding☆467Apr 13, 2026Updated 3 months ago
- Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!☆576Jan 29, 2024Updated 2 years ago
- Coverage-guided, in-process fuzzing for the JVM☆1,244Updated this week
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆227Apr 2, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Contextual Content Discovery Tool☆3,230Jul 10, 2026Updated last week
- Automated Security Testing For REST API's☆2,656Jun 5, 2024Updated 2 years ago
- A self-hosted Fuzzing-As-A-Service platform☆2,828Nov 1, 2023Updated 2 years ago
- CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with min…☆1,361Jul 3, 2026Updated 2 weeks ago
- AFLNet: A Greybox Fuzzer for Network Protocols (https://thuanpv.github.io/publications/AFLNet_ICST20.pdf)☆1,011May 26, 2025Updated last year
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆15,959Updated this week
- A fork and successor of the Sulley Fuzzing Framework☆2,349Updated this week
- Fast web fuzzer written in Go☆16,399Updated this week
- OSS-Fuzz - continuous fuzzing for open source software.☆12,451Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Tutorials, examples, discussions, research proposals, and other resources related to fuzzing☆3,778Oct 24, 2024Updated last year
- A toolkit for testing, tweaking and cracking JSON Web Tokens☆6,711May 1, 2025Updated last year
- MINER provided by the paper "MINER: A Hybrid Data-Driven Approach for REST API Fuzzing"☆44Mar 15, 2023Updated 3 years ago
- InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable…☆1,798Jun 17, 2026Updated last month
- FitM, the Fuzzer in the Middle, can fuzz client and server binaries at the same time using userspace snapshot-fuzzing and network emulati…☆292May 8, 2022Updated 4 years ago
- The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power…☆6,664Updated this week
- the Network Protocol Fuzzer that we will want to use.☆793Jan 29, 2024Updated 2 years ago
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆496May 13, 2023Updated 3 years ago
- The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.☆5,279May 19, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- DOM fuzzer☆1,788Nov 26, 2024Updated last year
- A JavaScript Engine Fuzzer☆2,314Updated this week
- Fuzz Introspector -- introspect, extend and optimise fuzzers☆461Jul 10, 2026Updated last week
- HTTP parameter discovery suite.☆6,359Feb 20, 2025Updated last year
- Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practis…☆1,696May 24, 2025Updated last year
- Multi-Cloud Security Auditing Tool☆7,755Sep 23, 2025Updated 9 months ago
- Automatic SSRF fuzzer and exploitation tool☆3,594Sep 4, 2025Updated 10 months ago
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆4,190Apr 21, 2024Updated 2 years ago
- A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the communit…☆3,856May 1, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…☆875May 16, 2026Updated 2 months ago
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…☆8,746Jul 13, 2026Updated last week
- GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)☆1,678Mar 11, 2024Updated 2 years ago
- Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabl…☆29,843Updated this week
- Web application fuzzer☆6,543Jan 21, 2026Updated 5 months ago
- ☆1,649Jun 17, 2026Updated last month
- Recent Fuzzing Paper☆2,767Mar 19, 2026Updated 4 months ago