GraphQL Voyager / InQL

Open Source

InQL is a Burp Suite and standalone GraphQL security scanner. Analyzes introspection queries, genera…

Retire.js

Open Source

Detects the use of JavaScript libraries with known vulnerabilities. Available as a CLI tool, browser…

devguard

Free

DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage …

NoSQLMap

Open Source

Automated NoSQL injection and database exploitation tool. Targets MongoDB, CouchDB, Redis, and Cassa…

BurpAPISecuritySuite

Open Source

Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzi…

Evilginx2

Open Source

Standalone man-in-the-middle attack framework that bypasses 2FA by proxying authentication sessions …