porch-pirate
watchdogsecurity/porch-piratePorch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API…
api-securityinformation-gatheringosint+4
466
watchdogsecurity/porch-piratePorch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API…
teycir/burpapisecuritysuiteBurp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and…
s4dhulabs/vimana-frameworkVimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to…
piratesshield/apiharvesterThe one shot API attacker tool - finds the API url from the given root simulate the automated attacks
cspf-founder/api-scanner-dockerAutomated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full …
filipegaudard/cve-2026-30945-pocProof-of-concept exploit for CVE-2026-30945, an IDOR in StudioCMS allowing arbitrary API token revocation and denial of service. Includes manual and…
saykino/cve-2025-56219Detailed advisory for CVE-2025-56219, a rate-limiting flaw in Ascertia SigningHub's Add User API, enabling automated user creation and denial of…
shoucheng3/asf__nifi_cve-2023-36542_1-22-0Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…
shoucheng3/apache__nifi_cve-2022-33140_1-16-22Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…
lucasrenaa/cve-2018-25031Python-based proof-of-concept script demonstrating CVE-2018-25031 XSS vulnerability in Swagger UI using Selenium for automated detection across…
nuid/nebulousadNebulousAD automated credential auditing tool.
mitrecnd/whodatPivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)
git-pkgs/proxyA lightweight caching proxy for package registries.
patrowl/patrowlmanagerPatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
cc1a2b/jshunterjshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…
gdatasoftwareag/vaasVerdict-as-a-Service SDKs: Analyze files for malicious content
ambitsecurity/jshoundFind every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.
