crapi

Here are 3 public repositories matching this topic...

uliyach45 / crapi-pentest-report

API penetration test of crAPI using a chained "surgical toolkit" (Kiterunner, ffuf, TruffleHog, Arjun, Dalfox) — BOLA, SSRF, and secret exposure findings.

cybersecurity penetration-testing api-security trufflehog crapi idor ffuf bola owasp-api-top-10 kiterunner

Updated Jul 2, 2026

gfmcorrea / api-security-crapi

Star

API security assessment against OWASP crAPI focused on OWASP API Security Top 10, BOLA, Excessive Data Exposure, authentication review, authorization testing, evidence collection, and remediation reporting.

docker owasp cybersecurity penetration-testing appsec api-security crapi security-assessment burp-suite bola excessive-data-exposure owasp-api-top-10

Updated Jun 13, 2026

AadityaSuthar / crapi-api-security-lab

Star

Two OWASP API Top 10 attacks (BOLA, JWT alg:none) that pass straight through a tuned ModSecurity WAF — showing where perimeter defence stops.

jwt waf owasp modsecurity appsec api-security crapi bola

Updated Sep 16, 2026
JavaScript

Add this topic to your repo

To associate your repository with the crapi topic, visit your repo's landing page and select "manage topics."

Learn more