A comprehensive collection of resources designed to help you enhance the security of your APIs. In this repository, you'll find a wide range of wordlists, checklists, vulnerable app setups, Logger++ filters and resources dedicated to REST APIs, JSON, and GraphQL.
☆34Nov 6, 2024Updated last year
Alternatives and similar repositories for API-Pentesting-Resources
Users that are interested in API-Pentesting-Resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆31Feb 26, 2026Updated 5 months ago
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 8 months ago
- Vulnerable Docker containers designed to simulate vulnerable services for enthusiasts looking to sharpen their skills in identifying, exp…☆30Mar 30, 2026Updated 4 months ago
- A Burp extension to Fuzz URLs for HTTP parser inconsistencies☆15Jan 9, 2024Updated 2 years ago
- An entry level resource to learning bug bounty.☆28Apr 11, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML sour…☆18Updated this week
- A universal Frida Script that prevents application self-termination for iOS Applicaitons.☆17Apr 29, 2026Updated 3 months ago
- A browser extension that helps users shop online with various utility features.☆14Jan 9, 2025Updated last year
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 3 months ago
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- ☆21May 25, 2025Updated last year
- My ATO Via Password Reset Methodology☆53May 13, 2026Updated 2 months ago
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆41Jun 24, 2026Updated last month
- Magisk module that auto-packages renef_server (dynamic instrumentation for Android)☆33May 11, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- Kumpulan command yang dijalankan setiap chapter materi pelatihan Wazuh.☆18Oct 1, 2023Updated 2 years ago
- A bash script that extracts `shodan-query, google-query, censys-query, fofa-query, hunter-query, zoomeye-query` in nucleihub-templates.☆15Feb 17, 2026Updated 5 months ago
- 🌸 Store anime picture collection in a Discord server☆19Aug 13, 2023Updated 2 years ago
- A collection of open source and commercial tools that aid in red team operations.☆11Jun 12, 2019Updated 7 years ago
- Like DLP☆11Jan 27, 2025Updated last year
- 🗄 CLI archival tool for the Wayback Machine☆11Mar 5, 2023Updated 3 years ago
- API-Pentesting-Checklist☆28Feb 27, 2023Updated 3 years ago
- CrackDb是一款Java开发的数据库账号密码破解工具。支持 Access、Mysql、SQL Server、Oracle等数据库破解☆14Apr 9, 2017Updated 9 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Playback webpages from Wayback Machine☆13Jul 17, 2026Updated 3 weeks ago
- Extensión de Burp Suite que incorpora detección pasiva de vulnerabilidades mediante inteligencia artificial.☆17Updated this week
- ☆44Mar 13, 2023Updated 3 years ago
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆58Jul 12, 2026Updated 3 weeks ago
- A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.☆23Apr 17, 2026Updated 3 months ago
- Autonomous multi-cipher PE crypter with 18-layer structural metamorphism, 8 encryption engines, and real-time AV/EDR threat modeling☆17Feb 11, 2026Updated 5 months ago
- An OSINT tool for discovering domains, organizations, and addresses from SSL/TLS certificates using crt.sh. Supports proxy configurations…☆12Jun 18, 2025Updated last year
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆51May 2, 2026Updated 3 months ago
- ☆47Mar 7, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CEREBRO-RED v2: Advanced LLM Red Team Research Platform with PAIR Algorithm and LLM-as-a-Judge Evaluation☆16Mar 21, 2026Updated 4 months ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- Stake Reload Xtremely Simlified @StakeReloadXS @StakeReload☆11Sep 9, 2025Updated 11 months ago
- Some Useful Tricks for Pentest Android and iOS Apps☆181Nov 10, 2025Updated 9 months ago
- SelfHosted - Bug Bounty Programs | Discover new and fresh bug bounty programs across platforms. Updated frequently to always display the …☆16Nov 24, 2025Updated 8 months ago
- This repo collects nuclei template from 600+ github repos, updates every 6 hours.☆38Feb 17, 2026Updated 5 months ago
- A structured, auto-updating archive of disclosed HackerOne reports. Filter by severity, CWE weakness, bounty program, or year - ideal for…☆32Updated this week