Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...

API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).

Node.js-based API penetration testing tool with a user-friendly web interface.

ScriptOcalypse 🏴‍☠️- Nothing here… just a lot of weird ideas with a chaotic mix of lemonade, boredom, and automation that somehow work.

A powerful directory brute-force tool that's tailored for recursive/multiplex operations, API discovery and enumeration, JS file scraping, and lists API HTTP methods, in one command. This is not ONLY for APIs, my tool just excels at them

Complete OWASP API Top 10 2023 reference. Structured methodology, deep vulnerability analysis, and API security testing techniques. Enterprise-ready API security assessment.

MCP server for autonomous API logic penetration testing. AI-driven detection of OWASP API Top 10 vulnerabilities (BOLA/IDOR) via multi-session authorization comparison. Supports Bearer, Basic, API Key, Cookie auth. Generates Markdown security audit reports with evidence.

🛡️ Automate penetration testing with PentestGPT, an AI-driven agent designed to enhance security assessments efficiently and effectively.

Notes, labs, cheatsheets, and certificate for the API Penetration Testing (ApiSec University) course. Focuses on OWASP API Top 10, attack techniques, and secure API design.

Damn Vulnerable API (DVAPI) is an intentionally vulnerable API application designed for learning, practicing, and testing API security concepts.