Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Automatic SQL injection and database takeover tool
Checklist of the most important security countermeasures when designing, testing, and releasing your API
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
- aws-security
- study-guide
- study-plan
- appsec
OWASP API Security Project
APIKit:Discovery, Scan and Audit APIs Toolkit All In One.
- burp-extensions
- apisec
- api-security
- api-sec
This challenge is Inon Shkedy's 31 days API Security Tips.
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
- waf
- application-security
- web-application-firewall
- modsecurity
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Goma Gateway – Lightweight, High-Performance API Gateway and Reverse Proxy with declarative config, robust middleware, and support for REST, GraphQL, TCP, UDP, and gRPC.