mirror of https://github.com/arainho/awesome-api-security.git synced 2024-10-01 01:06:11 -04:00

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

Go to file

André Rainho 465745ffd6 new entry for presentations/videos API hacking for the Actually Pretty Inexperienced hacker		2021-06-22 11:06:55 +01:00
LICENSE	Initial commit	2020-08-14 18:07:58 +01:00
README.md	new entry for presentations/videos	2021-06-22 11:06:55 +01:00

awesome-apisec

A collection of awesome API Security tools and resources.

Awesome Repositories

Repository	Description
awesome-security-apis	A collective list of public JSON APIs for use in security

Repository	Description
Arjun	HTTP parameter discovery suite
fuzzapi	Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
kiterunner	Contextual Content Discovery Tool
MindAPI	Organize your API security assessment by using MindAPI
Astra	Automated Security Testing For REST API's

Website	Description
owasp-api-security-top-10	OWASP API Security Top 10

Website	Description
API Security Encyclopedia	APIsecurity.io - API Security Encyclopedia

Repository	Description
API-Security-Checklist	Checklist of the most important security countermeasures when designing, testing, and releasing your API

Website	Description
Kontra - OWASP Top 10 for API	Is a series of free interactive application security training modules that teach developers how to identify and mitigate security vulnerabilities in their web API endpoints.
Pentesting Lab: vAPI	vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable PHP Interface that mimics OWASP API Top 10 scenarios in the means of Exercises.

Website	Description
API hacking for Inexperienced hacker	API hacking for the Actually Pretty Inexperienced hacker with Katie Paxton-Fear - OWASP DevSlop
pentesting-rest-apis	Pentesting Rest API's by :- Gaurang Bhatnagar
Securing your APIs	“How Secure are you APIs?” - Securing your APIs: OWASP API Top 10 2019, Case Study and Demo
api-security-testing-for-hackers	API Security Testing For Hackers
bad-api-hapi-hackers	Bad API, hAPI Hackers!
disclosing-information-via-your-apis	Hidden in Plain Site: Disclosing Information via Your APIs
rest-in-peace-abusing-graphql	REST in Peace: Abusing GraphQL to Attack Underlying Infrastructure

Project	Description
owasp api security project	OWASP API Security Project - API Security Top 10

Newsletter	Description
api security articles	API Security Articles - The Latest API Security News, Vulnerabilities & Best Practices

Location	Description
List of API endpoints & objects	A list of 3203 common API endpoints and objects designed for fuzzing.
SecLists for API's web-content discovery	It is a collection of web content discovery lists for APIs used during security assessments.
GraphQL SecList	It's a GraphQL list used during security assessments, collected in one place.

Website	Description
31-days-of-API-Security-Tips	This challenge is Inon Shkedy's 31 days API Security Tips.
Awesome REST	A collaborative list of great resources about RESTful API architecture, development, test, and performance. Feel free to contribute to this on-going list.
How to design a REST API	How to design a REST API? - Full guide tackling security, pagination, filtering, versioning, partial answers, CORS, etc.
API Penetration Testing	API Penetration Testing with OWASP 2017 Test Cases
api-security-testing-how-to-hack	API Security Testing – How to Hack an API and Get Away with It (Part 1 of 3)
GraphQL penetration testing	How to exploit GraphQL endpoint: introspection, query, mutations & tools