Test Library

Test Library is Akto’s library of built-in API security tests. These tests span OWAP TOP 10 of APIs, HackerOne Top 10 and all the new and critical API vulnerabilities.
Today we have the following test categories in our library, each one having multiple tests:
​Broken Object Level Authorization (BOLA)​
​Cross-Origin Resource Sharing (CORS)​
​Broken User Authentication (BUA)​
​Misconfigured HTTP Headers (MHH)​
​Verbose Error Messages (VEM)​
​Server Side Request Forgery (SSRF)​
​Unnecessary HTTP Methods (UHM)​
​Mass Assignment (MA)​
​Security Misconfiguration (SM)​
​Lack of Resources & Rate Limiting (RL)​
​Server Version Disclosure (SVD)​
​Server Side Template Injection (SSTI)​
​Local File Inclusion (LFI)​
​Command Injection​
​CRLF Injection​
​Cross-site scripting (XSS)​
Our methodology of building test library: We are building the test library keeping in mind the needs of our users. Our users care about covering OWASP Top 10 of APIs and all the new critical vulnerabilities. Additionally, if we see our users creating custom tests that are also valuable for other members, we add those tests to our test library and make it available to everyone.
How to contribute to test library?
If you want to contribute to Akto’s test library and make those tests available to community, we welcome you to add by forking here. You can contribute as many tests as you want. When you add the test, we will do the following:
We will add your name as the author of the test in the product and website both.
We give you a shoutout on our socials.
Every month we select the Test of the month of all the custom tests developed by the community. if your test is selected, you will get the following:
Exclusive Akto Merch
3 months of Akto Enterprise free
Recognition among security engineers and pentesters
Last modified 2mo ago