Alternatives and similar repositories for API-Pentesting-Resources

Users that are interested in API-Pentesting-Resources are comparing it to the libraries listed below

• thecybersandeep / mobapp-storage-inspector
  A tool for inspecting and analyzing mobile application storage files.
  ☆49Updated 8 months ago
• jagat-singh-chaudhary / 403-and-401-Bypass-Techniques
  ☆47Updated 11 months ago
• ch1y0w0 / ParamScan
  ParamScan is a chrome extension for finding reflected parameters in a webpage.
  ☆92Updated last year
• sudosuraj / Awesome-Bug-Bounty
  This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer whil…
  ☆64Updated 9 months ago
• boobooHQ / private_templates
  Private Nuclei Templates
  ☆100Updated 11 months ago
• mmarting / unwaf
  Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques, such as: SPF records and DNS history. By default, Unw…
  ☆98Updated 7 months ago
• anmolksachan / WayBackupFinder
  A passive way to find backups/ sensitive information.
  ☆87Updated 7 months ago
• 0xSojalSec / Mobile-Application-Security
  Resources for Mobile Application Testing 📓
  ☆74Updated last year
• nirajkharel / NotJustAChecklist
  ☆42Updated 7 months ago
• i5nipe / nipejs
  Simplify your life with leak detection in JavaScript. NipeJS streamlines the use of regex, making it effortless to uncover potential leak…
  ☆96Updated last year
• jhaddix / CSPReconGO
  ☆107Updated last year
• mhmdiaa / waybackrobots
  Enumerate old versions of robots.txt paths using Wayback Machine for content discovery
  ☆57Updated 2 years ago
• 0xPugal / knoxsser
  A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API
  ☆75Updated last year
• Tedixx / dmarc-subdomains
  Tool to parse subdomains from dmarc.live
  ☆149Updated last year
• reewardius / iis-pentest
  ☆82Updated 7 months ago
• hahwul / smugglex
  Rust-powered HTTP Request Smuggling Scanner.
  ☆99Updated last week
• xnl-h4ck3r / webpaste
  Save your dorking results to the terminal. A modified version of TomNomNom's amazing tool!
  ☆98Updated 11 months ago
• adeadfed / PwnFox-For-Chromium
  A BurpSuite extension that allows you to use Chromium with PwnFox
  ☆41Updated last month
• 0xAnuj / Blinks
  Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the int…
  ☆140Updated last year
• doyensec / CSPTPlayground
  CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).
  ☆151Updated 10 months ago
• h4md153v63n / eLearnSecurity-Web-Application-Penetration-Tester-eXtreme-eWPTXv2
  eLearnSecurity Web application Penetration Tester eXtreme (eWPTXv2)
  ☆28Updated 2 years ago
• BugBountyzip / bugbounty.zip
  ☆78Updated 8 months ago
• freelancermijan / reconengine
  A Powerful Recon Engine
  ☆68Updated last year
• 0xKayala / Custom-Nuclei-Templates
  Community curated list of templates for the nuclei engine to find security vulnerabilities.
  ☆81Updated 2 months ago
• dr34mhacks / formatify
  Formatify is a Burp Suite extension that instantly converts HTTP requests into multiple formats like cURL, Python, PowerShell, and more—s…
  ☆30Updated 4 months ago
• RikunjSindhwad / Task-Ninja
  Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!
  ☆154Updated 4 months ago
• TheGetch / Burp-Suite-Pro-Scan-Profiles
  Custom scan profiles for use with Burp Suite Pro
  ☆151Updated last year
• orwagodfather / SQL-Wordlist
  ☆85Updated last year
• xssdoctor / graphqlMaker
  Finds graphql queries in javascript files
  ☆68Updated last year
• Suryesh / Firebase_Checker
  Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…
  ☆53Updated 3 months ago