intruder-io/autoswagger

Contextual Content Discovery Tool

Metlo is an open-source API security platform.

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Terminal UI to list, browse and run APIs defined with openapi spec.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

Community curated list of templates for the nuclei engine to find security vulnerabilities.