#1Tools for assessing the security of REST, SOAP, and GraphQL APIs.
Kitploit recommended

ExtendedMacro - BurpSuite plugin providing extended macro functionality

GraphQL automated security testing toolkit

Web app authorisation coverage scanning

Http request smuggling vulnerability scanner

DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

Python API security testing tool from OpenStack Security Group

A modern vulnerable web app

Hackable HTTP proxy for resiliency testing and simulated network conditions

Server scanning component of purpleteam

CLI component of purpleteam

Application scanning component of purpleteam