Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -197,6 +197,7 @@ Business logic testing focuses on identifying security flaws in an API’s core
12. **[API Hammer](https://github.com/Azure/api-hammer)** – Simulates different API request scenarios to test workflow security.
13. **[BOLA Detector](https://github.com/BOLA-Detector)** – Identifies Broken Object Level Authorization (BOLA) issues.
14. **[GadgetProbe](https://github.com/BishopFox/GadgetProbe)** – Tests serialization vulnerabilities affecting API logic.
15. **[Darkmoon](https://github.com/ASCIT31/Dark-Moon)** Autonomous API penetration testing platform that chains reconnaissance, authentication, injection and business logic testing with 50 agents over MCP and reproducible proof of exploitation.
15. **Custom Python Scripts** – Tailor-made automation for detecting API logic flaws.
---

Expand Down