Tools
gotestwaf
wallarm/gotestwaf
A Go-based security testing tool that generates malicious REST, GraphQL, gRPC and OWASP attack traffic to evaluate WAFs and API security products.
Topics
Related projects
SafeLine23.3kA self-hosted web application firewall and reverse proxy that protects websites from injections, XSS, bots, and abuse.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.
owtf2kOWASP OWTF is a penetration-testing framework that unifies security tools behind a web UI and REST API, helping testers run standards-aligned web assessments and produce interactive reports.
uusec-waf1.7kAn industrial-grade web application firewall and API security gateway with semantic and machine-learning detection, HIPS/RASP defense and CDN caching, deployed on your own Linux server.
Check-Risk-WAF1.6kAn all-in-one web application firewall with anti-bot and anti-DDoS protection at L3, L4 and L7, custom WAF rules, rate limiting, AI attack analysis and SIEM integration, on-premises or SaaS.
git-hound1.5kGitHound is a command-line GitHub reconnaissance tool that combines dorks, regex matching and entropy checks to hunt for exposed API keys and credentials across public repositories, Gists and commit history.