Pinned Loading

1. overstep overstep Public

   Authorization regression testing for REST APIs and MCP servers in CI/CD. Define access policies as a matrix, generate positive and negative tests, and detect BOLA, BFLA, BOPLA and privilege escalat…

   Python 2 1

2. rcekit rcekit Public

   Test a URL or captured HTTP request for RCE—and know what the evidence actually proves. RCEKit checks command injection, SSTI and blind paths, separates confirmed execution from uncertain signals a…

   Python 27 3

3. HeaderHawk HeaderHawk Public

   HTTP header security scanner. Finds Host header injection, web cache poisoning, request smuggling and unkeyed-input gadgets, assesses HSTS/CSP/cookie posture, confirms every finding with a second p…

   Python 6 2

4. gdos gdos Public

   GraphQL DoS resilience scanner — verify your endpoint is hardened against denial-of-service amplification across 12 vectors (depth, aliases, batching, directives, introspection, persisted queries, …

   Python 1