A comprehensive collection of resources designed to help you enhance the security of your APIs. In this repository, you'll find a wide range of wordlists, checklists, vulnerable app setups, Logger++ filters and resources dedicated to REST APIs, JSON, and GraphQL.
☆35Nov 6, 2024Updated last year
Alternatives and similar repositories for API-Pentesting-Resources
Users that are interested in API-Pentesting-Resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tool to bypass 40X response codes.☆48Sep 18, 2022Updated 4 years ago
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 9 months ago
- A powerful static analysis tool that uses AI to scan Android APK files for security vulnerabilities and potential issues. The scanner dec…☆36Apr 6, 2025Updated last year
- Stake.com Mines Bot (Demo)☆13Apr 13, 2026Updated 5 months ago
- A collection of open source and commercial tools that aid in red team operations.☆11Jun 12, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 🗄 CLI archival tool for the Wayback Machine☆11Mar 5, 2023Updated 3 years ago
- API-Pentesting-Checklist☆30Feb 27, 2023Updated 3 years ago
- Playback webpages from Wayback Machine☆13Aug 22, 2026Updated 3 weeks ago
- A program to find the real string for your hash. MD5, SHA256, any really. Works really fast, gets to the "aaaa" combo in about 1 second e…☆19Jun 5, 2021Updated 5 years ago
- ☆46Mar 13, 2023Updated 3 years ago
- A Burp extension to Fuzz URLs for HTTP parser inconsistencies☆16Jan 9, 2024Updated 2 years ago
- An OSINT tool for discovering domains, organizations, and addresses from SSL/TLS certificates using crt.sh. Supports proxy configurations…☆12Jun 18, 2025Updated last year
- A curated collection of courses, videos, and resources to master network security from the ground up.☆10Jan 6, 2025Updated last year
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Stake Reload Xtremely Simlified @StakeReloadXS @StakeReload☆11Sep 9, 2025Updated last year
- Contains all the scripts and sample apps related to android in app protections.☆46Apr 19, 2026Updated 5 months ago
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆42Jun 24, 2026Updated 2 months ago
- A universal Frida Script that prevents application self-termination for iOS Applicaitons.☆17Apr 29, 2026Updated 4 months ago
- vulntechfinder is a powerful security tool that automates vulnerability scanning based on technology stack detection. It intelligently pr…☆20Aug 23, 2026Updated 3 weeks ago
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 4 months ago
- Web Shell finder using grep, where it has wordlist around the world to grep inside using regex and wordlist. So Lightweight and fast!☆38Jun 23, 2026Updated 2 months ago
- Evilginx2-Phishlets☆22Nov 21, 2025Updated 9 months ago
- Keno bot for Stake.com☆21Apr 14, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Some Useful Tricks for Pentest Android and iOS Apps☆183Nov 10, 2025Updated 10 months ago
- Introduction to CYS4-SensitiveDiscoverer, a Burp extension that discovers sensitive information inside HTTP messages.☆28Nov 26, 2024Updated last year
- Response Filter Denial of Service (RFDoS) Experimental Scanner☆17Nov 10, 2024Updated last year
- A macOS utility that captures a region of your screen and mirrors it in a separate window.☆18Feb 10, 2026Updated 7 months ago
- A resources for who want to learn and get deep into client-side bugs☆558Dec 8, 2024Updated last year
- Food delivery cross-platform mobile app made with React Native and Expo☆14Oct 11, 2022Updated 3 years ago
- Live streaming TV and Radio from any country you want, for free!☆33Nov 7, 2023Updated 2 years ago
- Anonymous metrics from Go☆19Dec 10, 2018Updated 7 years ago
- Syscall tracing CLI & library made in Rust☆16Dec 12, 2022Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆69May 2, 2026Updated 4 months ago
- Grafana integration with GLPI☆18Updated this week
- Cyborg Mass Fuzzer — subfuzzerX is a high-speed reconnaissance engine built to aggressively fuzz multiple subdomains in parallel, uncover…☆17Jun 11, 2025Updated last year
- Useful Alfred Snippets for Pentest☆18Dec 5, 2024Updated last year
- Example usage of Dyninst☆16Jul 21, 2026Updated last month
- Linkfinder by Rdzsp is a browser extension that automatically scans and collects endpoints from JavaScript files on websites☆32Aug 22, 2024Updated 2 years ago
- KenoAi is a keno prediction artificial intelligence that uses machine learning to predict numbers of next draw in kino games.☆22Nov 24, 2025Updated 9 months ago