
toxy
Hackable HTTP proxy for resiliency testing and simulated network conditions

Martian is a library for building custom HTTP/S proxies

A modern vulnerable web app

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

REST/JSON API to the Burp Suite security tool.

Research on GraphQL from an AppSec point of view.

Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to…

GraphQL automated security testing toolkit

Python API security testing tool from OpenStack Security Group

Web app authorisation coverage scanning

Http request smuggling vulnerability scanner

DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider

API-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…

ExtendedMacro - BurpSuite plugin providing extended macro functionality

CLI component of purpleteam

Server scanning component of purpleteam

Application scanning component of purpleteam