#1API testing, fuzzing, schema validation, authentication testing, and gateway security tools.
Kitploit recommended
owasp/python-honeypotOWASP Honeypot, Automated Deception Framework.
watchdogsecurity/porch-piratePorch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API…
dolevf/graphql-copLightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…
openpcc/openpccAn open-source framework for verifiably private AI inference
lsh123/xmlsecXML Security Library
pompelmi/pompelmiClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or…
teycir/burpapisecuritysuiteBurp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and…
undeadsec/swaggerspyAutomated OSINT tool that scans SwaggerHub API documentation to discover exposed secrets, credentials, and sensitive information using regex-based…
lucky-luk3/grafikiThreat Hunting tool about Sysmon and graphs
sentrypeer/sentrypeerDistributed SIP honeypot that detects and shares fraud data on VoIP attacks. Collects bad actor IPs and phone numbers via peer-to-peer network, with…
nicholasaleks/graphql-threat-matrixGraphQL threat framework used by security professionals to research security gaps in GraphQL implementations
lumoslab-innovation/openhunteraiLocal-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding…
uwctcjnwlk/web3-decoderBurp Suite extension for decoding Ethereum JSON-RPC calls and smart contract interactions, supporting multiple chains and automatic ABI retrieval.
hashicorp-forge/groveA Software as a Service (SaaS) log collection framework.
owasp/secure-agent-playbookOWASP Secure Agent Playbook Project
tno-s3/wuppiefuzzA coverage-guided REST API fuzzer developed on top of LibAFL
softrams/bulwarkAn organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
vulncheck-oss/cliVulnCheck's official command line tool
