How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
mitmproxy2swagger is a tool that transforms captured mitmproxy network traffic into structured OpenAPI schemas for reverse-engineering REST APIs. It functions as an OpenAPI schema converter and network traffic documentation utility, extracting API endpoints and data structures from captured network packets to create formal technical references. The tool enables the reconstruction of undocumented APIs by converting intercepted HTTP request and response patterns into specifications. It supports merging multiple traffic capture files into a single schema to incrementally expand an API map and ut
APIKit：Discovery, Scan and Audit APIs Toolkit All In One.
An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API security risks.
Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.
The main features of owasp/offat are: REST API Security Tools.
Open-source alternatives to owasp/offat include: alufers/mitmproxy2swagger — mitmproxy2swagger is a tool that transforms captured mitmproxy network traffic into structured OpenAPI schemas for… api-security/apikit — APIKit：Discovery, Scan and Audit APIs Toolkit All In One. apiclarity/apiclarity — An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and… assetnote/kiterunner — Contextual Content Discovery Tool. blst-security/cherrybomb — Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API… akto-api-security/akto — Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+…