API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs
☆134Oct 3, 2026Updated last week
Alternatives and similar repositories for vespasian
Users that are interested in vespasian are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven te…☆77Oct 3, 2026Updated last week
- Organizational asset discovery tool with 20+ plugins covering certificate transparency, passive DNS, and all 5 Regional Internet Registri…☆92Oct 3, 2026Updated last week
- A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.☆195Updated this week
- Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds☆245Oct 3, 2026Updated last week
- Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian☆363Oct 3, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Sep 28, 2026Updated last week
- GitHub Action to alert on security patches before the CVE drops.☆222Sep 29, 2026Updated last week
- High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential v…☆709Updated this week
- Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra al…☆327Updated this week
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…☆72Nov 27, 2025Updated 10 months ago
- A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.☆384Sep 17, 2026Updated 3 weeks ago
- AI-Powered Web Attack Surface Enumeration☆55Updated this week
- A golang-written credential harvesting framework leveraging eBPF for kernel-level monitoring with anti-detection capabilities.☆51Apr 13, 2026Updated 5 months ago
- Open-source cloud security reconnaissance framework☆68Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Static auditor for randomness and nonce hygiene in Python source - flags weak PRNGs, hardcoded keys, reused counters, static IVs, short s…☆23Sep 5, 2026Updated last month
- LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go…☆302Updated this week
- A POC tool for exploring dev-tunnels☆73May 5, 2026Updated 5 months ago
- ☆24Sep 9, 2025Updated last year
- Pentester-focused Docker registry tool to enumerate and pull images☆41Oct 19, 2025Updated 11 months ago
- GitHub Workflows Insights☆47Jun 27, 2026Updated 3 months ago
- Audit content (pdfs, media files, images) sensitivity on urls☆45Jun 2, 2026Updated 4 months ago
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆64Updated this week
- Did you contain the compromised identity? notyet☆42Jul 16, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆20Apr 16, 2026Updated 5 months ago
- Tokenex is a Go library that securely exchanges identity tokens for temporary cloud credentials, with built-in support for AWS, GCP, Azur…☆87Oct 1, 2026Updated last week
- Inline proxy for software package registries to provide observability and policy controls to installs.☆53Sep 22, 2026Updated 2 weeks ago
- Universal Security Visualization library☆18May 31, 2026Updated 4 months ago
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆28Apr 20, 2026Updated 5 months ago
- A powerful containerized tool that automatically downloads, extracts, and scans packages from PyPI and npm for embedded secrets, API keys…☆20Jul 25, 2025Updated last year
- Octoscan is a static vulnerability scanner for GitHub action workflows.☆273Mar 30, 2026Updated 6 months ago
- Crawl and analyze JavaScript for secrets, tokens, and API endpoints. A powerful bug bounty tool for automated JS analysis.☆28Aug 30, 2026Updated last month
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Feb 26, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This repository is a collection of JavaScript gadgets that can be used to bypass XSS mitigations such as Content Security Policy (CSP) an…☆149Feb 4, 2026Updated 8 months ago
- A simple web viewer for TruffleHog JSON output.☆21Jan 7, 2026Updated 9 months ago
- Notion C2 Profile for Mythic☆49Apr 30, 2026Updated 5 months ago
- JamfHound is a python3 project designed to collect and identify attack paths in Jamf Pro tenants based on existing object permissions by …☆138Apr 23, 2026Updated 5 months ago
- MCP Snitch is a macOS application that intercepts and monitors MCP server communications, providing security analysis, access control, an…☆93Oct 14, 2025Updated 11 months ago
- Security gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!☆136Mar 11, 2026Updated 7 months ago
- The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2…☆67Sep 18, 2026Updated 3 weeks ago