A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

GraphQL automated security testing toolkit

Tests your API automatically for common API vulnerabilities. Project is still Work In Progress. PRs are appreciated.

API Penetration Testing Notes

A Swiss knife for API security testing including a docker image, some labs and resources.

Feature request system.

BOLA_Excessive_Data_Exposure_API_Pentest (Based on crAPI, my learning)

컴퓨터공학과 해킹과 대응기술 정리입니다.