A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
47,133 repositories indexed
457–480 of 1,050 · Most stars
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
An understated approach to iOS integration testing.
Immutable transaction isolated sql driver for golang
A smooth testing lib for F#. APIs made for humans! Strong testing methodologies for everyone!
User-oriented Web UI browser tests in Python
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Fast, native API client for REST, gRPC, WebSocket and GraphQL. A local-first Postman alternative written in Go: no Electron, no account, no cloud.
Backend and Frontend application for tracking differences via image comparison
Testing tools for javac and annotation processors
Task management system based on .NET 8 with Microservices, DDD, CQRS, Event Sourcing and Testing Concepts
Security Auditor Utility for GraphQL APIs
PHP Censor is an open source self-hosted continuous integration server for PHP projects.
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Appium Server setup to automate android testing on real devices
Experimental Darling runtime patches and tools for testing the macOS League client on Linux
:chipmunk: Simple and complete Svelte DOM testing utilities that encourage good testing practices
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Cross-platform test runner
Minimal unit testing framework for C
Network testing for Swift
Differencify is a library for visual regression testing
A multiplatform expectation library for Kotlin
List of Bluetooth BR/EDR/LE security resources