API Security Testing

Thin router for API penetration testing. Use the index sections to load the specific workflow, payload file, or methodology doc for the phase you're in. Do not pre-load everything.

When to Use

• Pentesting a REST, GraphQL, gRPC, or WebSocket API.
• OWASP API Top 10 (2023) coverage assessment.
• BOLA / BFLA / BOPLA authorization matrix analysis.
• JWT / OAuth / API-key auth testing.
• Fuzzing endpoints, parameters, or schemas.
• Parsing and attacking OpenAPI / Swagger / GraphQL schemas.
• Rate-limit / resource-consumption testing.

Trigger Phrases