A comprehensive collection of resources designed to help you enhance the security of your APIs. In this repository, you'll find a wide range of wordlists, checklists, vulnerable app setups, Logger++ filters and resources dedicated to REST APIs, JSON, and GraphQL.
☆35Nov 6, 2024Updated last year
Alternatives and similar repositories for API-Pentesting-Resources
Users that are interested in API-Pentesting-Resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Feb 26, 2026Updated 7 months ago
- An entry level resource to learning bug bounty.☆28Apr 11, 2018Updated 8 years ago
- A browser extension that helps users shop online with various utility features.☆14Jan 9, 2025Updated last year
- Tool to bypass 40X response codes.☆48Sep 18, 2022Updated 4 years ago
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A powerful static analysis tool that uses AI to scan Android APK files for security vulnerabilities and potential issues. The scanner dec…☆36Apr 6, 2025Updated last year
- Kumpulan command yang dijalankan setiap chapter materi pelatihan Wazuh.☆18Oct 1, 2023Updated 3 years ago
- A collection of open source and commercial tools that aid in red team operations.☆11Jun 12, 2019Updated 7 years ago
- 🗄 CLI archival tool for the Wayback Machine☆11Mar 5, 2023Updated 3 years ago
- API-Pentesting-Checklist☆31Feb 27, 2023Updated 3 years ago
- CrackDb是一款Java开发的数据库账号密码破解工具。支持 Access、Mysql、SQL Server、Oracle等数据库破解☆15Apr 9, 2017Updated 9 years ago
- Playback webpages from Wayback Machine☆13Aug 22, 2026Updated last month
- A program to find the real string for your hash. MD5, SHA256, any really. Works really fast, gets to the "aaaa" combo in about 1 second e…☆19Jun 5, 2021Updated 5 years ago
- ☆46Mar 13, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A Burp extension to Fuzz URLs for HTTP parser inconsistencies☆16Jan 9, 2024Updated 2 years ago
- ☆48Mar 7, 2025Updated last year
- A curated collection of courses, videos, and resources to master network security from the ground up.☆10Jan 6, 2025Updated last year
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- Contains all the scripts and sample apps related to android in app protections.☆46Apr 19, 2026Updated 5 months ago
- ☆10Apr 1, 2025Updated last year
- Fetch, download, and decompile Android/iOS/Exe assets from HackerOne bug bounty programs☆43Jun 24, 2026Updated 3 months ago
- Archive of pentestmonkey.net cheat sheets in case the site goes away permanently☆13Oct 28, 2019Updated 6 years ago
- 🧸 🤖 Determine the collection slug for a collection on OpenSea.☆12Apr 19, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- DursVuln - Nmap Scripting Engine (NSE)☆23Jul 16, 2025Updated last year
- Private (one to one) realtime Chat App with Laravel 6.2 and Vue☆16Mar 2, 2023Updated 3 years ago
- A universal Frida Script that prevents application self-termination for iOS Applicaitons.☆17Apr 29, 2026Updated 5 months ago
- vulntechfinder is a powerful security tool that automates vulnerability scanning based on technology stack detection. It intelligently pr…☆20Aug 23, 2026Updated last month
- ☆20Apr 28, 2025Updated last year
- The Router Exploitation Framework☆12Nov 10, 2017Updated 8 years ago
- Evilginx2-Phishlets☆25Nov 21, 2025Updated 10 months ago
- Keno bot for Stake.com☆23Apr 14, 2026Updated 5 months ago
- Unity app incorrectly sets cpu affinity to max capacity cores. Setup the library name and mask to always report the same max cpu freq to …☆21Apr 16, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Some Useful Tricks for Pentest Android and iOS Apps☆183Nov 10, 2025Updated 10 months ago
- Introduction to CYS4-SensitiveDiscoverer, a Burp extension that discovers sensitive information inside HTTP messages.☆28Nov 26, 2024Updated last year
- Monitors and curates bug-bounty related repositories weekly (Monday).☆90Updated this week
- ☆27Nov 15, 2024Updated last year
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- Response Filter Denial of Service (RFDoS) Experimental Scanner☆17Nov 10, 2024Updated last year
- A macOS utility that captures a region of your screen and mirrors it in a separate window.☆18Feb 10, 2026Updated 8 months ago