The Wayback Machine - https://web.archive.org/web/20220601085256/https://github.com/topics/api-security

#

api-security

Here are 69 public repositories matching this topic...

inonshk / 31-days-of-API-Security-Tips

This challenge is Inon Shkedy's 31 days API Security Tips.

security bug-bounty infosec bugbounty pentest api-security bugbountytips api-pentest

Updated Apr 20, 2022

arainho / awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

security fuzzing awesome-list pentest api-security api-pentest api-sec apisec api-hacking api-hunting api-hacks

Updated May 28, 2022

HolyTips

HolyBugx / HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

api checklist security web webapp pentesting writeups bugbounty pentest websecurity api-security bugbountytips bugbounty-writeups

Updated Sep 5, 2021

wallarm / gotestwaf

An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses

security waf owasp bugbounty web-application-firewall security-tools web-application-security security-testing graphql-security api-security rest-security grpc-security

Updated May 26, 2022
Go

API-Security / APIKit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

burp-extensions api-security api-sec apisec

Updated Nov 24, 2021
Java

Zeyad-Azima / Offensive-Resources

A Huge Learning Resources with Labs For Offensive Security Players

Updated Feb 5, 2022

cherrybomb

blst-security / cherrybomb

Open

Homebrew method of installation

1

remyleone commented May 6, 2022

Is your feature request related to a problem? Please describe.

I would like to install and receive upgrades for cherrybomb using my package manager on macOS. Homebrew.

Describe the solution you'd like

I would like to do a brew install cherrybomb to install cherrybomb to the latest version.

Describe alternatives you've considered

Installing it using a script. I would pref

Read more

enhancement good first issue help wanted

Open

More passive checks

Open

💡 Provide CherryBomb in an official Docker image

1

MindAPI

dsopas / MindAPI

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

hacking methodology mindmap api-security mindapi

Updated May 3, 2022

api-firewall

wallarm / api-firewall

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

api security api-gateway proxy firewall swagger openapi waf apigateway api-wrapper openapi-spec openapi-specification web-application-firewall security-tools web-application-security api-security rest-security api-firewall openapi-security api-waf

Updated Apr 11, 2022
Go

apiclarity

openclarity / apiclarity

Reconstruct Open API Specifications from real-time workload traffic seamlessly.

kubernetes microservices microservice swagger wasm openapi k8s openapi-spec service-mesh openapi-specification envoy istio api-security shadow-api zombie-api

Updated May 30, 2022
Go

adhocore / php-jwt

Ultra lightweight, dependency free and standalone JSON web token (JWT) library for PHP5.6 to PHP8.0. This library makes JWT a cheese.

php jwt oauth2 php7 php-jwt jwt-authentication json-web-signature json-web-token jwt-auth hacktoberfest php8 api-security json-web-token-php api-auth adhocore hacktoberfest2021

Updated Feb 24, 2022
PHP

piomin / sample-spring-oauth2-microservices

Sponsor

some examples that show basic and more advanced implementations of oauth2 authorization mechanism in spring-cloud microservices environment

oauth jwt oauth2 spring-boot spring-cloud authorization spring-security zuul spring-security-oauth2 api-security microservices-security

Updated Jan 22, 2020
Java

approov / shipfast-api-protection

Learn practical Mobile and API security techniques: API Key, Static and Dynamic HMAC, Dynamic Certificate Pinning, and Mobile App Attestation.

api mobile mobile-app api-client api-server apis hmac-authentication pinning mobile-security mobile-security-framework mobile-development api-key certificate-pinning api-security api-keys mobile-app-security approov api-secret api-key-authentication mobile-app-attestation

Updated Mar 26, 2022
Kotlin

dotnet-labs / HerokuContainer

Dockerized ASP.NET Core Web API app in Heroku

api docker authentication dotnet dotnetcore swagger file-upload container auth authorization webapp api-security dotnet5

Updated Mar 11, 2021
C#

approov / AppAuth-OAuth2-Books-Demo

A companion repo for the blog article: https://blog.approov.io/adding-oauth2-to-mobile-android-and-ios-clients-using-the-appauth-sdk

mobile mobile-app mobile-security api-security approov approov-demo

Updated Aug 12, 2019
Java

miztiik / secure-private-api

AWS API Gateway Security Deep dive

aws api-gateway cdk api-security resource-policy cloud-development-kit miztiik private-endpoint

Updated Apr 7, 2021
Python

wallarm / docker-wallarm-node

⚡️ Docker official image for Wallarm Node. API security platform agent.

nginx security security-audit waf security-scanner web-application-firewall security-automation security-tools application-firewall api-security envoyproxy rest-security api-firewall openapi-security

Updated May 19, 2022
Shell

hellsing

Fricciolosa-Red-Team / hellsing

Sniper. Passive Secrets Hunting.🚬

api secrets information-extraction secrets-scan token secret-keys api-security information-disclosure information-discovery secrets-detection

Updated Jan 6, 2022
JavaScript

Codevate / public-api-blog-post-example

A companion project for our blog post describing how to secure public APIs client-side.

php oauth2 symfony2 oauth2-server symfony-application symfony-api public-api api-security

Updated Oct 11, 2017
PHP

jessety / simple-hmac-auth

Sponsor

Protocol specification and Node library designed to make building APIs that use HMAC signatures simple

nodejs hmac-authentication request-signatures api-security request-signing simple-hmac-auth

Updated May 31, 2021
TypeScript

jeevan-patil / api-design

API Design & Security

api security oauth2 spring-boot mongodb travis-ci swagger mockito spring-security api-rest querydsl codecov api-security

Updated Oct 29, 2017
Java

ArtiomL / f5-app-sec

😎 Succeeding with application security

waf owasp anti-bot app-security api-security f5-asm f5-awaf bados l7-ddos

Updated Nov 11, 2018
PHP

aws-samples / step-up-auth

How to implement Step-up Authentication using Amazon Cognito

lambda node typescript api-gateway dynamodb cognito application-security rba cdk api-security adaptive-authentication step-up-authentication step-up-auth adaptive-auth rule-based-authentication

Updated Apr 2, 2022
TypeScript

ahmedhosnycs / drf-simple-api-signing

This package facilitates the way of API Signing in Django projects.

python api django python3 request-signatures api-security request-signing

Updated Oct 21, 2021
Python

paulveillard / cybersecurity-API-security-checklist

An ongoing collection of awesome software, API libraries, checlists, best guidelines and resources and most important security countermeasures when designing, testing, and releasing your API.

api-documentation api-client api-server api-consumer api-blueprint api-design api-generator api-documentation-tool api-authentication api-call api-security api-endpoints api-automation secure-api api-communication api-authorizarion api-development-platform

Updated Feb 2, 2022

Ksloveyuan / ApiSecurityDemo

Secure api by RSA sign and verify functionality

api-security rest-security

Updated Aug 26, 2019
JavaScript

Swap76 / Enigma

Javascript GraphQL and REST API Encryption API

https rest-api cryptojs api-security apollo-graphql

Updated Apr 29, 2022
JavaScript

approov / quickstart-elixir-phoenix-absinthe-graphql-token-check

Approov integration example quickstarts for the Elixir Phoenix framework with the Absinthe library for GraphQL

api elixir elixir-phoenix api-security approov approov-backend approov-quickstart approov-bakend-quickstart

Updated May 27, 2022
Elixir

quickstart-nodejs-express-token-check

approov / quickstart-nodejs-express-token-check

An Appoov token integration example for NodeJS. Article: https://blog.approov.io/approov-integration-in-a-nodejs-express-api

Updated May 12, 2022
JavaScript

api-crypto-spring-boot

itrondi / api-crypto-spring-boot

api-crypto-spring-boot 是基于 Spring Boot 开发的控制器统一注解方式自动加解密请求体、响应体的启动器，该组件能够提供在接口交互过程中数据的安全保护能力。支持常见的加解密算法、编码、签名等模式;

Updated Jul 2, 2021
Java

Improve this page

Add a description, image, and links to the api-security topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the api-security topic, visit your repo's landing page and select "manage topics."