api-security
There are 12 repositories under api-security topic.
jassics / security-study-plan
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
arainho / awesome-api-security
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
inonshk / 31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
API-Security / APIKit
APIKit：Discovery, Scan and Audit APIs Toolkit All In One.
Language:Java 1877- HolyTips
metlo-labs / metlo
Metlo is an open-source API security platform.
Language:TypeScript 1602wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
Language:Go 1534- cherrybomb
blst-security / cherrybomb
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.
Language:Rust 1119 akto-api-security / akto
Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
Language:Java 995Zeyad-Azima / Offensive-Resources
A Huge Learning Resources with Labs For Offensive Security Players
openappsec / openappsec
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
Language:C++ 849- MindAPI
🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)
- uuWAF
Safe3 / uuWAF
A industry-leading free, high-performance, AI and semantic technology web application and API security protection product - uuWAF. 一款工业级免费、高性能、高扩展，支持AI和语义引擎的Web应用和API安全防护产品-南墙。Web应用防火墙、WAF、WAAP
Language:C 675 - api-firewall
Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.
Language:Go 583 - apiclarity
openclarity / apiclarity
An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API security risks.
Language:Go 509 OWASP / OFFAT
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.
Language:Python 453adhocore / php-jwt
Ultra lightweight, dependency free and standalone JSON web token (JWT) library for PHP5.6 to PHP8.2. This library makes JWT a cheese. It is a minimal JWT integration for PHP.
Language:PHP 294Mehdi0x90 / Web_Hacking
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
mytechnotalent / Go-Hacking
A FREE comprehensive online Go hacking tutorial utilizing the x64, ARM64 and ARM32 architectures going step-by-step into the world of reverse engineering Golang from scratch.
Language:Go 197piomin / sample-spring-oauth2-microservices
some examples that show basic and more advanced implementations of oauth2 authorization mechanism in spring-cloud microservices environment
Language:Java 134- Language:Python 78
approov / shipfast-api-protection
Learn practical Mobile and API security techniques: API Key, Static and Dynamic HMAC, Dynamic Certificate Pinning, and Mobile App Attestation.
Language:Kotlin 73Escape-Technologies / graphql-security-academy
🔒 A free, open-source platform dedicated to understand and secure GraphQL applications — all directly in your browser!
Language:Svelte 51- Language:HTML 47
cerberauth / vulnapi
VulnAPI is an open-source project designed to help you scan your APIs for security vulnerabilities and weaknesses.
Language:Go 41CyberAlbSecOP / Awesome_CyberSec_Bible
Cyber-Security Bible! Theory and Tools, Kali Linux, Penetration Testing, Bug Bounty, CTFs, Malware Analysis, Cryptography, Secure Programming, Web App Security, Cloud Security, Devsecops, Ethical Hacking, Social Engineering, Privacy, Incident Response, Threat Assestment, Personal Security, Ai Security, Android Security, Iot Security, Standards.
dotnet-labs / HerokuContainer
Dockerized ASP.NET Core Web API app in Heroku
Language:C# 34⚡️ Official docker image for Wallarm Node. API security platform agent.
Language:Shell 32aws-samples / step-up-auth
How to implement Step-up Authentication using Amazon Cognito
Language:TypeScript 30chamithrepo / nest-keycloak-oauth
Secure NestJs Rest API with Keycloak
Language:TypeScript 29A companion repo for the blog article: https://blog.approov.io/adding-oauth2-to-mobile-android-and-ios-clients-using-the-appauth-sdk
Language:Java 26miztiik / secure-private-api
AWS API Gateway Security Deep dive
Language:Python 22- api-crypto-spring-boot
itrondi / api-crypto-spring-boot
api-crypto-spring-boot 是基于 Spring Boot 开发的控制器统一注解方式自动加解密 请求体、响应体 的启动器，该组件能够提供在 接口交互过程中数据的安全保护能力。支持常见的 加解密算法、编码、签名 等模式;
Language:Java 16 jessety / simple-hmac-auth
Protocol specification and Node library designed to make building APIs that use HMAC signatures simple
Language:TypeScript 15
