API Security Project aims to present unique attack & defense methods in API Security field

completely ridiculous API (crAPI)

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

This repository was developed using .NET 7.0 API technology based on findings listed in the OWASP 2019 API Security Top 10.

Tests your API automatically for common API vulnerabilities. Project is still Work In Progress. PRs are appreciated.

API Penetration Testing Notes

This is a Python based API-Security framework containing ApiSecurityHeader.py script which will check the Security response headers mentioned in OWASP Secure Headers Project are present and contains the required value.

vulnerable REST API designed for educational purposes. It simulates common security flaws found in web applications and APIs, providing a hands-on learning experience for developers and security enthusiasts.

API Returning/Manipulating Resources and Validating Input; Services, Dependency Injection and Entity Framework Core; Searching, Filtering, and Paging Resources; Securing, Versioning, Documenting and Rate Limiting API; Unit Testing; Consuming API with HttpClientFactory; Managing Data Display and User Input; AJAX Requests; Ensuring Web App Security;

Complete Package of API Firewalll (wallarm) with controller and panel