Repository Index

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

• penetration-testing
• pentesting
• security-audit
• security-automation

Automatic SQL injection and database takeover tool

• sql-injection
• detection
• exploitation
• python

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

• api-security
• application-security
• kubernetes
• nginx

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

• waf
• application-security
• web-application-firewall
• modsecurity

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

• attack-surfaces
• pentesting
• security
• devsecops

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

Goma Gateway – Lightweight, High-Performance API Gateway and Reverse Proxy with declarative config, robust middleware, and support for REST, GraphQL, TCP, UDP, and gRPC.

• api-gateway
• go-proxy
• microservices
• api-management