BBVA/apicheck

Stars
263
Rank 155,624 (Top 4 %)
Language
Python
License
Apache License 2.0
Created almost 8 years ago
Updated almost 2 years ago

BBVA/apicheck

BBVA

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

The DevSecOps toolset for REST APIs

APICheck - The DevSecOps toolset for REST APIs

Documentation Status

APICheck is a complete toolset designed and created for testing REST APIs.

Why APICheck

APICheck focuses not only in the security testing and hacking use cases. The goal of the project is to become a complete toolset for DevSecOps cycles.

The tools are aimed to diverse users profiles:

Developers
System Administrators
Security Engineers & Penetration Testers

Documentation

Here you can find the complete documentation.

Authors

APICheck is being developed by BBVA Innovation Security Labs team.

License

APICheck is Open Source Software and available under the Apache 2 license.

Contributions

Contributions are of course welcome. See CONTRIBUTING or skim existing tickets to see where you could help out.

kapow

Kapow! If you can script it, you can HTTP it.

kvm

Simple Docker KVM container

mirrorgate

MirrorGate DevOps Dashboard

raft-badger

Raft backend implementation using BadgerDB

patton

The clever vulnerability dependency finder

qed

The scalable, auditable and high-performance tamper-evident log project

deeptracy

The Security Dependency Orchestrator Service

timecop

Time series based anomaly detector

waf-brain

Machine Learning WAF Based

Jupyter Notebook

chaos-monkey-engine

A Chaos Engineering swiss army knife

patton-cli

The knife of the Admin & Security auditor

susto

Systematic Universal Security Testing Orchestration

sqerzo

Tiny ORM for graph databases: Neo4j, RedisGraph, AWS Neptune or Gremlin

open-cells

Open Cells routes & communicates web component applications.

Tarkin

A tool for anomaly detection over streaming data based on sentiment analysis

Jupyter Notebook

openstack-k8s

Openstack Deployment based on Kubernetes

data-refinery

Data transformation

mist

Create complex tools execution Workflows for working together

mercury-robust

mercury-robust is a framework to perform robust testing on ML models and datasets. It provides a collection of test that are easy to configure and helpful to guarantee robustness in your ML processes.

Jupyter Notebook

brainslug

Parasitic Computing Framework

idsfree

Launch hacking tests in cloud providers securely, isolated and without raise security alerts in the provider

gitsec

gitsec: GIT Secret Discovery

UMAL

Modelling heterogeneous distributions with an Uncountable Mixture of Asymmetric Laplacians

Jupyter Notebook

spark-benchmarks

Benchmarking suite for Apache Spark

mercury-dataschema

Utility package that, given a Pandas DataFrame, it uses the DataSchema class which auto-infers feature types and automatically calculates different statistics depending on the types.

ust2dsa

Improves Ubuntu security feed compatibility allowing it to be consumed by Debian vulnerability report tool, debsecan.

masquerade

High-performance, real-time, multi-location data obfuscation tool

openshift-utils

Openshift resources

Jupyter Notebook

mercury-explainability

mercury-explainability is a library with implementations of different state-of-the-art methods in the field of explainability. They are designed to work efficiently and to be easily integrated with the main Machine Learning frameworks.

Jupyter Notebook

mercury-reels

Reels is a library for analyzing sequences of events from transactional data to predict when related target events may occur in the future.

mercury-monitoring

mercury-monitoring is a library to monitor data and model drift

Jupyter Notebook

mercury-settrie

A Python 3 library developed in C++ that enables efficient storage and querying of sets of sets. It can be used to perform fast document search. Uses the Settrie algorithm: https://osebje.famnit.upr.si/~savnik/papers/cdares13.pdf

contract-testing

An experiment of contract testing using pact

waf-benchmark

Web Application Firewall Benchmark

BeagleML

Machine Learning Model Trainer

docker-hdfs-alluxio-spark

Docker images and deployment configurations for a cluster of HDFS, Alluxio and Spark. Focusing on data locality. Support Openshift 3.4, and more comming.

k8s-configs

Kubernetes templates for openstack-k8s

deeptracy-core

Deeptracy core for building deeptracy plugins

economics-of-serverless

Economics of Serverless

purescript-google-apps

Google Apps Script bindings for PureScript

mirrorgate-jenkins-builds-collector

Jenkins plugin for collecting build results inside the MirrorGate dashboard

hancock-wallet-hub

hancock-dlt-adapter

hancock-dlt-broker

Docs: https://bbva.github.io/hancock-dlt-broker/api.html

json-logex

Logger custom backend for console json output (elixir library)

k8s-course

security-vault

Secrets bridge for containers

deeptracy-api

REST API for Deeptracy project

BeagleML-front

Machine Learning Model Trainer - Frontend

pacarana

A standalone ETL tool to generate advanced features for your Machine Learning projects

mirrorgate-jira-stories-collector

Jira collector for mirrorgate dashboard

heat-templates

Heat Docker Templates

osc-docker

Docker container for Openstack clients

mirrorgate-aws-cloudwatch-metrics-collector

MirrorGate collector that gathers operation metrics from AWS CloudWatch

bump-go

Action for keeping the Go version of your project up-to-date

mirrorgate-bamboo-builds-collector

Bamboo builds collector for MirrorGate

deeptracy-dashboard

Deeptracy dashboard

gitbook

GitBook Documentation

Overlord

mirrorgate-sample-deployment

Sample docker-compose running the MirrorGate

mirrorgate-markets-collector

This Node application connects to a MirrorGate endpoint to get the id of the applications which comments and ratings must be recovered from Google Play and App Store.

mirrorgate-google-analytics-collector

Collector for analytics data from Google Analytics

cognito-mfa-singlestep-authorization-plugin

ductype-manifesto

A functional shell inspired by algebraic data types and UNIX, designed to make command-line scripting easier and more powerful.

proctool

PoC: Artifact Tracing via Process IO Monitoring

BeagleML-scheduler

Machine Learning Model Trainer - Scheduler

crawlino

Crawling by rules definition

buildbot-washer

Useful Patterns for Buildbot

BeagleML-monitor

Machine Learning Model Trainer - Monitor