
wapiti
Web vulnerability scanner written in Python3

Web vulnerability scanner written in Python3

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and…

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Automated REST API fuzzer and negative testing tool for OpenAPI endpoints. Generates, runs, and reports thousands of self-healing tests with no…

A wordlist of API names for web application assessments

PyJFuzz - Python JSON Fuzzer

SAML2 Burp Extension

Curated wordlists of API function names, verbs, and nouns for fuzzing web application endpoints with Burp Suite Intruder.

A rapid HTTP downgrade smuggling scanner written in Go.

GraphQL penetration testing tool that exploits weak rate limits and cost analysis to brute-force credentials, bypass 2FA, enumerate users, and fuzz…

Build structure-aware black-box HTTP fuzzers in Rust with composable mutators, schedulers, observers, deciders, and processors for custom web and API…

An open testing platform that probes HTTP/1.1 servers against RFC 9110/9112 requirements, smuggling vectors, and malformed input handling. Add your…

Discover hidden parameters in Caido

MAPS cloud scanner and response parser for Microsoft Defender research.

Radamsa fuzzer extension for Burp Suite

A lightweight CLI tool for systematically detecting and exploiting race conditions in web applications, APIs, and modern services.

Global API Integrity Assessor