Automatic API Attack Tool
6.2#15 in api security testing softwareFree planFree planLinuxWindows
VisitAutomatic API Attack Tool vs WuppieFuzz
WuppieFuzz
7.3#3 in api security testing softwareFree planFree planAPILinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | Automatic API Attack Tool | WuppieFuzz |
|---|---|---|
| Extensibility | The project says its fuzzing and request generation functionality can be extended for specific needs. | The project invites contributions such as new language coverage agents and mutation techniques. |
| License | The repository lists an MIT license. | WuppieFuzz is available under the Apache 2.0 license. |
| Purpose | The tool takes an API specification as input and generates and runs attacks based on it. | WuppieFuzz is a coverage-guided REST API fuzzer built on LibAFL to find potential errors and security flaws. |
Automatic API Attack Tool plans
- MIT-licensed open-source toolFree
WuppieFuzz plans
- WuppieFuzzFree
- WuppieFuzz FreeFree
Pick Automatic API Attack Tool if…
This tool suits developers and security teams who have a Swagger 2.0 specification and want to run API tests locally or in a CI/CD job. It requires Java 8 or higher and Gradle.
Pick WuppieFuzz if…
WuppieFuzz may suit developers, quality teams, and security testers working with APIs described by OpenAPI specifications. It is relevant to users seeking self-hosted fuzzing for development, supply-chain checks, or penetration testing.