
Retrofit-1
Type-safe HTTP client for Android and Java with annotation-based API binding, converter support, and integration with OkHttp for network…

Type-safe HTTP client for Android and Java with annotation-based API binding, converter support, and integration with OkHttp for network…
REST/JSON API to the Burp Suite security tool.

Hooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to…

A modern vulnerable web app

Web app authorisation coverage scanning

DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider

CVE-2025-41090 (brokeCLAUDIA): Broken access control in microCLAUDIA, the anti-ransomware platform by CCN-CERT.

API-first subdomain discovery service using Certificate Transparency logs for fast, passive enumeration of subdomains via a REST API with JSON or…

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

ExtendedMacro - BurpSuite plugin providing extended macro functionality

Http request smuggling vulnerability scanner

Research on GraphQL from an AppSec point of view.