Awesome-Mirrors/awesome-api-security
1
0
Fork 0
mirror of https://github.com/arainho/awesome-api-security.git synced 2024-10-01 01:06:11 -04:00
Code Issues Packages Projects Releases Wiki Activity
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
17 Commits 5 Branches 0 Tags 19 MiB
e96a98f16d
Go to file
André Rainho e96a98f16d
kontra traning modules 
Kontra - OWASP Top 10 for API
2021-03-07 00:23:02 +00:00
LICENSE Initial commit 2020-08-14 18:07:58 +01:00
README.md kontra traning modules 2021-03-07 00:23:02 +00:00

README.md

awesome-apisec

A collection of awesome API Security tools and resources.

Awesome Repositories

Repository Description
awesome-security-apis A collective list of public JSON APIs for use in security

Tools

Repository Description
Arjun HTTP parameter discovery suite
fuzzapi Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

Cheatsheets

Website Description
owasp-api-security-top-10 OWASP API Security Top 10

Wiki's / Encyclopedias

Repository Description
API Security Encyclopedia APIsecurity.io - API Security Encyclopedia

Checklist

Repository Description
API-Security-Checklist Checklist of the most important security countermeasures when designing, testing, and releasing your API

Training / Labs

Kontra - OWASP Top 10 for API | Is a series of free interactive application security training modules that teach developers how to identify and mitigate security vulnerabilities in their web API endpoints.

Presentations / Videos

Repository Description
pentesting-rest-apis Pentesting Rest API's by :- Gaurang Bhatnagar
Securing your APIs “How Secure are you APIs?” - Securing your APIs: OWASP API Top 10 2019, Case Study and Demo
api-security-testing-for-hackers API Security Testing For Hackers
bad-api-hapi-hackers Bad API, hAPI Hackers!
disclosing-information-via-your-apis Hidden in Plain Site: Disclosing Information via Your APIs
rest-in-peace-abusing-graphql REST in Peace: Abusing GraphQL to Attack Underlying Infrastructure

Other useful repositories

Repository Description
31-days-of-API-Security-Tips This challenge is Inon Shkedy's 31 days API Security Tips.
Awesome REST A collaborative list of great resources about RESTful API architecture, development, test, and performance. Feel free to contribute to this on-going list.
How to design a REST API How to design a REST API? - Full guide tackling security, pagination, filtering, versioning, partial answers, CORS, etc.
API Penetration Testing API Penetration Testing with OWASP 2017 Test Cases
api-security-testing-how-to-hack API Security Testing – How to Hack an API and Get Away with It (Part 1 of 3)