Security Pipeline vs. OWASP crAPI + Quality Gate
-
Updated
Nov 4, 2026 - Python
#
crapi
Here are 8 public repositories matching this topic...
OWASP crAPI assessment: BOLA, JWT alg=none, missing rate limiting, injection and misconfiguration findings
-
Updated
Oct 12, 2026
Hands-on application security labs, web and API vulnerability assessments, and security research with practical write-ups, remediation guidance, and evidence.
owasp application-security owasp-top-10 security-testing api-security crapi portswigger-labs portswigger-burp-suite-professional application-security-tools
-
Updated
Oct 20, 2026
API penetration test of crAPI using a chained "surgical toolkit" (Kiterunner, ffuf, TruffleHog, Arjun, Dalfox) — BOLA, SSRF, and secret exposure findings.
cybersecurity penetration-testing api-security trufflehog crapi idor ffuf bola owasp-api-top-10 kiterunner
-
Updated
Jul 2, 2026
OWASP-aligned validation of crAPI weaknesses with preserved request/response evidence
-
Updated
Jun 6, 2026
Investigacao de seguranca de API sobre o OWASP crAPI: 8 vulnerabilidades do API Security Top 10 documentadas, exploradas e com evidencias + scan ZAP em CI (PT/EN)
qa jwt owasp penetration-testing postman owasp-zap newman ssrf security-testing api-security crapi owasp-api-security-top-10
-
Updated
Nov 7, 2026 - HTML
API security assessment against OWASP crAPI focused on OWASP API Security Top 10, BOLA, Excessive Data Exposure, authentication review, authorization testing, evidence collection, and remediation reporting.
docker owasp cybersecurity penetration-testing appsec api-security crapi security-assessment burp-suite bola excessive-data-exposure owasp-api-top-10
-
Updated
Jun 13, 2026
Two OWASP API Top 10 attacks (BOLA, JWT alg:none) that pass straight through a tuned ModSecurity WAF — showing where perimeter defence stops.
-
Updated
Sep 16, 2026 - JavaScript
Add this topic to your repo
To associate your repository with the crapi topic, visit your repo's landing page and select "manage topics."