FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

api-security · GitHub Topics · GitHub

Explore Topics Trending Collections Events GitHub Sponsors
#

api-security

Star

Here are 885 public repositories matching this topic...

Language: All
Filter by language
All 885 Python 276 TypeScript 86 JavaScript 82 Go 53 C# 44 Java 44 Shell 25 Rust 23 HTML 20 PHP 15
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

KeygraphHQ / shannon

Star 46.9k

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

security security-audit owasp ci-cd cybersecurity penetration-testing pentesting appsec offensive-security ethical-hacking security-automation sarif security-tools devsecops security-testing api-security red-teaming ai-security pentesting-tools ai-penetration-testing
  • Updated Aug 19, 2026
  • TypeScript

sqlmapproject / sqlmap

Sponsor
Star 38.2k

Automatic SQL injection and database takeover tool

python database detection dbms sql-injection pentesting exploitation appsec webappsec sqlinjection security-testing api-security database-security webapp-security security-testing-tool
  • Updated Aug 18, 2026
  • Python

jassics / security-study-plan

Star 5k

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

cybersecurity infosec application-security pentesting study-guide appsec aws-security study-plan security-testing api-security azure-security appsec-tutorials gcp-security devsecops-university cybersecurity-education study-planner
  • Updated Aug 12, 2026

arainho / awesome-api-security

Star 3.9k

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

security fuzzing infosec awesome-list pentest api-security api-pentest api-sec apisec api-hacking api-hunting api-hacks api-hardening
  • Updated May 1, 2026

API-Security / APIKit

Star 2.3k

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

burp-extensions api-security api-sec apisec
  • Updated Apr 2, 2024
  • Java

inonshk / 31-days-of-API-Security-Tips

Star 2.2k

This challenge is Inon Shkedy's 31 days API Security Tips.

security bug-bounty infosec bugbounty pentest api-security bugbountytips api-pentest
  • Updated Apr 20, 2022

HolyBugx / HolyTips

Star 2k

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

api checklist security web webapp pentesting writeups bugbounty pentest websecurity api-security bugbountytips bugbounty-writeups
  • Updated Sep 5, 2021

wallarm / gotestwaf

Star 1.8k

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

security waf owasp bugbounty web-application-firewall security-tools web-application-security security-testing graphql-security api-security rest-security grpc-security
  • Updated Jul 31, 2025
  • Go

metlo-labs / metlo

Star 1.8k

Metlo is an open-source API security platform.

aws security monitoring api-gateway cybersecurity infosec application-security vulnerabilities bugbounty pentest vulnerability-detection api-security api-pentest infosectools bugbounty-tools metlo
  • Updated Jul 25, 2025
  • TypeScript

Safe3 / uusec-waf

Star 1.7k

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

letsencrypt security ddos api-gateway waf xss owasp sql-injection application-security modsecurity web-application-firewall data-mask hips rasp api-security waap web-security-gateway uuwaf uusec-waf uusec
  • Updated Aug 16, 2026
  • Shell

openappsec / openappsec

Star 1.7k

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

nginx kubernetes rate-limiting waf owasp kong application-security appsec web-application-firewall security-tools owasp-top-ten devsecops api-security nginx-proxy-manager threat-prevention
  • Updated Aug 18, 2026
  • C++

owasp-noir / noir

Star 1.4k

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

security crystal owasp pentesting hacktoberfest devsecops endpoints api-security shadow-api attack-surfaces owasp-noir
  • Updated Aug 19, 2026
  • Crystal

blst-security / cherrybomb

Star 1.2k

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

api cli open-source http security best-practices openapi cybersecurity web-security business-logic cyber security-tools websecurity openapi3 web-sec-scanner api-security firecracker blst
  • Updated Oct 25, 2024
  • Rust

Zeyad-Azima / Offensive-Resources

Sponsor
Star 1.2k

A Huge Learning Resources with Labs For Offensive Security Players

api infrastructure learning security mobile web hack hacking owasp cybersecurity web-security mobile-security offensive offensive-security red-team owasp-top-10 cloud-security redteam api-security red-teaming
  • Updated Dec 9, 2025

dsopas / MindAPI

Star 880

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

hacking methodology mindmap api-security mindapi
  • Updated May 27, 2026

Mehdi0x90 / Web_Hacking

Star 805

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

security exploit hacking owasp cheatsheet enumeration penetration-testing vulnerability recon bugbounty pentest bypass payloads websecurity web-application-security redteam api-security webhacking bug-bounty-hunters api-pentest
  • Updated Jun 11, 2026

wallarm / awesome-nginx-security

Star 780

🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)

nginx kubernetes security webserver waf load-balancer apigateway application-security awesome-list naxsi modsecurity nginx-server nginx-configuration mod-security awesome-lists nginx-security api-security nginx-environment
  • Updated Oct 24, 2023

momenbasel / keyFinder

Star 697

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

javascript chrome-extension security osint secrets hacking cybersecurity bug-bounty infosec browser-extension pentesting bugbounty aws-keys reconnaissance api-security api-keys manifest-v3 secret-scanner secret-detection leaked-credentials
  • Updated Jul 19, 2026
  • JavaScript

OWASP / OFFAT

Sponsor
Star 664

The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

owasp api-rest api-security api-hacking api-security-testing offat
  • Updated Aug 18, 2026
  • Python

wallarm / api-firewall

Star 652

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

api security api-gateway proxy firewall swagger openapi waf apigateway api-wrapper openapi-spec openapi-specification web-application-firewall security-tools web-application-security api-security rest-security api-firewall openapi-security api-waf
  • Updated Apr 3, 2026
  • Go

Improve this page

Add a description, image, and links to the api-security topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the api-security topic, visit your repo's landing page and select "manage topics."

Learn more

Back | FazBrowse Home | New Git URL