API Security Testing

go-appsec/toolbox

Collaborative application security testing between humans and agents via CLI and MCP

momenbasel/vulnhawk

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

owasp/agent-security-regression-harness

Executable security regression testing for agentic applications and MCP-integrated systems.

kpomin57/waf-tester

A program for testing WAF functionality

horizon3ai/cve-2023-27532

Proof-of-concept exploit for CVE-2023-27532 in Veeam Backup and Replication that abuses an unsecured API endpoint to extract credentials from the…

tpt11fb/springvulscan

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

jas502n/burpsuite_pro_v1.7.37

Comprehensive web application security testing platform featuring advanced scanning engine, intercepting proxy, and automated vulnerability detection…

jp/hermes-proxy

Hermes Proxy - HTTP Traffic Analyzer

owasp/apicheck

Modular DevSecOps toolset for REST API security testing, designed for developers, sysadmins, and penetration testers to automate security checks…

coffinxp/google-api-key-scanner

Validates Google Maps API keys against 21 endpoints, revealing exposed services with PoC URLs, proxy support, and quiet mode for focused auditing.

trailofbits/slither-mcp

MCP server for Slither static analysis of Solidity smart contracts

sobri3195/pegasus-pentest-arsenal

A comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.

hackinglz/maps_scanner

MAPS cloud scanner and response parser for Microsoft Defender research.

morpheuslord/nmap-api

RESTful API wrapping Nmap for automated network scanning, port detection, service enumeration, and vulnerability analysis with optional AI-powered…

joanbono/gurp

Burp Commander written in Go

caido-community/paramfinder

Discover hidden parameters in Caido