A comprehensive collection of resources designed to help you enhance the security of your APIs. In this repository, you'll find a wide range of wordlists, checklists, vulnerable app setups, Logger++ filters and resources dedicated to REST APIs, JSON, and GraphQL.
☆34Nov 6, 2024Updated last year
Alternatives and similar repositories for API-Pentesting-Resources
Users that are interested in API-Pentesting-Resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Feb 26, 2026Updated 6 months ago
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 8 months ago
- Vulnerable Docker containers designed to simulate vulnerable services for enthusiasts looking to sharpen their skills in identifying, exp…☆31Mar 30, 2026Updated 5 months ago
- A Burp extension to Fuzz URLs for HTTP parser inconsistencies☆16Jan 9, 2024Updated 2 years ago
- An entry level resource to learning bug bounty.☆28Apr 11, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML sour…☆18Aug 8, 2026Updated 3 weeks ago
- A universal Frida Script that prevents application self-termination for iOS Applicaitons.☆17Apr 29, 2026Updated 4 months ago
- A browser extension that helps users shop online with various utility features.☆14Jan 9, 2025Updated last year
- Tool to bypass 40X response codes.☆47Sep 18, 2022Updated 3 years ago
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 3 months ago
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- ☆21May 25, 2025Updated last year
- My ATO Via Password Reset Methodology☆54May 13, 2026Updated 3 months ago
- Contains all the scripts and sample apps related to android in app protections.☆45Apr 19, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆41Jun 24, 2026Updated 2 months ago
- Magisk module that auto-packages renef_server (dynamic instrumentation for Android)☆33May 11, 2026Updated 3 months ago
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- A powerful static analysis tool that uses AI to scan Android APK files for security vulnerabilities and potential issues. The scanner dec…☆36Apr 6, 2025Updated last year
- Kumpulan command yang dijalankan setiap chapter materi pelatihan Wazuh.☆18Oct 1, 2023Updated 2 years ago
- Stake.com Mines Bot (Demo)☆13Apr 13, 2026Updated 4 months ago
- A bash script that extracts `shodan-query, google-query, censys-query, fofa-query, hunter-query, zoomeye-query` in nucleihub-templates.☆15Feb 17, 2026Updated 6 months ago
- 🌸 Store anime picture collection in a Discord server☆19Aug 13, 2023Updated 3 years ago
- A collection of open source and commercial tools that aid in red team operations.☆11Jun 12, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Like DLP☆11Jan 27, 2025Updated last year
- 🗄 CLI archival tool for the Wayback Machine☆11Mar 5, 2023Updated 3 years ago
- API-Pentesting-Checklist☆29Feb 27, 2023Updated 3 years ago
- CrackDb是一款Java开发的数据库账号密码破解工具。支持 Access、Mysql、SQL Server、Oracle等数据库破解☆14Apr 9, 2017Updated 9 years ago
- Playback webpages from Wayback Machine☆13Aug 22, 2026Updated last week
- Extensión de Burp Suite que incorpora detección pasiva de vulnerabilidades mediante inteligencia artificial.☆17Aug 22, 2026Updated last week
- A program to find the real string for your hash. MD5, SHA256, any really. Works really fast, gets to the "aaaa" combo in about 1 second e…☆19Jun 5, 2021Updated 5 years ago
- ☆45Mar 13, 2023Updated 3 years ago
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆61Jul 12, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.☆23Apr 17, 2026Updated 4 months ago
- Autonomous multi-cipher PE crypter with 18-layer structural metamorphism, 8 encryption engines, and real-time AV/EDR threat modeling☆19Feb 11, 2026Updated 6 months ago
- An OSINT tool for discovering domains, organizations, and addresses from SSL/TLS certificates using crt.sh. Supports proxy configurations…☆12Jun 18, 2025Updated last year
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆68May 2, 2026Updated 3 months ago
- ☆47Mar 7, 2025Updated last year
- A curated collection of courses, videos, and resources to master network security from the ground up.☆11Jan 6, 2025Updated last year
- CEREBRO-RED v2: Advanced LLM Red Team Research Platform with PAIR Algorithm and LLM-as-a-Judge Evaluation☆16Mar 21, 2026Updated 5 months ago