Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
Las características principales de fuzzapi/fuzzapi son: Fuzzing, REST API Security Tools.
Las alternativas de código abierto para fuzzapi/fuzzapi incluyen: ffuf/ffuf — This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure… ameenmaali/qsfuzz — qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities. api-security/apikit — APIKit：Discovery, Scan and Audit APIs Toolkit All In One. apiclarity/apiclarity — An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and… assetnote/kiterunner — Contextual Content Discovery Tool. alufers/mitmproxy2swagger — mitmproxy2swagger is a tool that transforms captured mitmproxy network traffic into structured OpenAPI schemas for…
This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure mapping. It functions as a security-focused scanner that identifies hidden files, directories, parameters, and virtual hosts by injecting payloads into HTTP requests. By systematically testing how servers handle various inputs, it assists in mapping the architecture of web applications and uncovering potential security vulnerabilities. The tool distinguishes itself through a highly concurrent engine that manages asynchronous request execution and recursive job orchestration. I
qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
APIKit：Discovery, Scan and Audit APIs Toolkit All In One.
mitmproxy2swagger is a tool that transforms captured mitmproxy network traffic into structured OpenAPI schemas for reverse-engineering REST APIs. It functions as an OpenAPI schema converter and network traffic documentation utility, extracting API endpoints and data structures from captured network packets to create formal technical references. The tool enables the reconstruction of undocumented APIs by converting intercepted HTTP request and response patterns into specifications. It supports merging multiple traffic capture files into a single schema to incrementally expand an API map and ut