api-security

There are 165 repositories under api-security topic.

  • jassics/security-study-plan

    Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

    4.5k11113573

  • arainho/awesome-api-security

    A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

    3.2k690542

  • inonshk/31-days-of-API-Security-Tips

    This challenge is Inon Shkedy's 31 days API Security Tips.

    2.1k622332

  • API-Security/APIKit

    APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

    Language:Java2k2168175
  • HolyTips

    HolyBugx/HolyTips

    A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

    1.8k764310

  • metlo-labs/metlo

    Metlo is an open-source API security platform.

    Language:TypeScript1.6k143292

  • wallarm/gotestwaf

    An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

    Language:Go1.6k4179226

  • akto-api-security/akto

    Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure

    Language:Java1.2k17162230
  • cherrybomb

    blst-security/cherrybomb

    Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

    Language:Rust1.2k126483

  • openappsec/openappsec

    open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

    Language:C++1.1k2217679

  • Zeyad-Azima/Offensive-Resources

    A Huge Learning Resources with Labs For Offensive Security Players

    948331213
  • uuWAF

    Safe3/uuWAF

    An industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

    Language:Lua931793113
  • MindAPI

    dsopas/MindAPI

    Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

    837233160

  • wallarm/awesome-nginx-security

    🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)

    75337374

  • OWASP/OFFAT

    The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

    Language:Python602142584
  • api-firewall

    wallarm/api-firewall

    Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

    Language:Go602242957
  • apiclarity

    openclarity/apiclarity

    An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API security risks. 

    Language:Go526214764

  • Mehdi0x90/Web_Hacking

    Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

    5199097

  • adhocore/php-jwt

    Ultra lightweight, dependency free and standalone JSON web token (JWT) library for PHP5.6 to PHP8.4+. This library makes JWT a cheese. It is a minimal JWT integration for PHP.

    Language:PHP296101520

  • mytechnotalent/Go-Hacking

    A FREE comprehensive online Go hacking tutorial utilizing the x64, ARM64 and ARM32 architectures going step-by-step into the world of reverse engineering Golang from scratch.

    Language:Go2169121

  • TPIsoftwareOSPO/digiRunner-Open-Source

    digiRunner: Your API Gateway for Microservices

    Language:Java1504237

  • piomin/sample-spring-oauth2-microservices

    some examples that show basic and more advanced implementations of oauth2 authorization mechanism in spring-cloud microservices environment

    Language:Java133128140

  • cerberauth/vulnapi

    API Security Vulnerability Scanner designed to help you secure your APIs.

    Language:Go11835214

  • abunuwas/fencer

    Automated API security testing

    Language:Python856413

  • approov/shipfast-api-protection

    Learn practical Mobile and API security techniques: API Key, Static and Dynamic HMAC, Dynamic Certificate Pinning, and Mobile App Attestation.

    Language:Kotlin7911011

  • CyberAlbSecOP/Awesome_CyberSec_Bible

    Cyber-Security Bible! Theory and Tools, Kali Linux, Penetration Testing, Bug Bounty, CTFs, Malware Analysis, Cryptography, Secure Programming, Web App Security, Cloud Security, Devsecops, Ethical Hacking, Social Engineering, Privacy, Incident Response, Threat Assestment, Personal Security, Ai Security, Android Security, Iot Security, Standards.

    751115

  • Escape-Technologies/graphql-security-academy

    🔒 A free, open-source platform dedicated to understand and secure GraphQL applications — all directly in your browser!

    Language:Svelte55514

  • OWASP/www-project-api-security

    OWASP Foundation Web Repository

    Language:HTML4718324

  • aws-samples/step-up-auth

    How to implement Step-up Authentication using Amazon Cognito

    Language:TypeScript339111

  • dotnet-labs/HerokuContainer

    Dockerized ASP.NET Core Web API app in Heroku

    Language:C#332124

  • chambits/nest-keycloak-oauth

    Secure NestJs Rest API with Keycloak

    Language:TypeScript321014

  • wallarm/docker-wallarm-node

    ⚡️ Official docker image for Wallarm Node. API security platform agent.

    Language:Shell3211022

  • ionutbalosin/java-application-security-practices

    Application security best practices and code implementations for Java developers. This project is intended for didactic purposes only, supporting my training course.

    Language:Java29406

  • approov/AppAuth-OAuth2-Books-Demo

    A companion repo for the blog article: https://blog.approov.io/adding-oauth2-to-mobile-android-and-ios-clients-using-the-appauth-sdk

    Language:Java271125

  • miztiik/secure-private-api

    AWS API Gateway Security Deep dive

    Language:Python223016
  • api-crypto-spring-boot

    itrondi/api-crypto-spring-boot

    api-crypto-spring-boot 是基于 Spring Boot 开发的控制器统一注解方式自动加解密 请求体、响应体 的启动器，该组件能够提供在 接口交互过程中数据的安全保护能力。支持常见的 加解密算法、编码、签名 等模式;

    Language:Java201110