Packer-Fuzzer
rtcatc/packer-fuzzerPacker Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
api-security-testingfuzzingvulnerability-scanners+1
rtcatc/packer-fuzzerPacker Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
endava/catsAutomated REST API fuzzer and negative testing tool for OpenAPI endpoints. Generates, runs, and reports thousands of self-healing tests with no…
chrislockard/api_wordlistA wordlist of API names for web application assessments
synacktiv/hoplaHopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite
dolevf/graphql-copLightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…
aws/http-desync-guardianAnalyze HTTP requests to minimize risks of HTTP Desync attacks (precursor for HTTP request smuggling/splitting).
ethicalhackingplayground/ssrf-kingSSRF plugin for burp Automates SSRF Detection in all of the Request
opaxial/cve-2026-9830CVE-2026-9830 Proof of Concept
tno-s3/wuppiefuzzA coverage-guided REST API fuzzer developed on top of LibAFL
ethicalhackingplayground/tproxerA Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.
dipjyotimetia/hybridtestframeworkEnd to End testing of Web, API, Cloud, Events and Security
0x999-x/jsluiceppjsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice
net-hunter121/api-wordlistCurated wordlists of API function names, verbs, and nouns for fuzzing web application endpoints with Burp Suite Intruder.
owasp/raiderOWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions
trailofbits/slither-mcpMCP server for Slither static analysis of Solidity smart contracts
42crunch/api-security-audit-actionAutomates static API security auditing of OpenAPI contracts in CI/CD, running 300+ checks for authentication, authorization, and data constraints,…
agentsid-dev/agentsid-scannerSecurity scanner for MCP servers. Grades auth, permissions, injection risks, and tool safety. The Lighthouse of agent security.
letsencrypt/test-certs-siteA simple server to host the valid, revoked, and expired certificates required by Section 2.2 of the CA/Browser Forum Baseline Requirements.