Hacker GitHub

← All repos

Endava/cats

View on GitHub ↗ ★ 1,379 Java

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

23 mentions on Hacker News by 2 people: 10 stories, 13 comments · first 2020-04-06 · latest 2026-09-14

Mentions per year 23 mentions · busiest year 2022 (7)
20082026
AllStoriesComments NewestTopOldest
  1. …will live under a single umbrella in the future. Additionally, I'm building a REST API fuzzer: https://github.com/Endava/cats
    comment by ludovicianul · 2026-09-14 · in Ask HN: What are you working on? (September 2026)
  2. An API fuzzer I've been building for several years now: https://github.com/Endava/cats
    comment by ludovicianul · 2025-01-20 · in The Fuzzing Book
  3. I've followed similar approach for building a REST API fuzzer for the past 3 years: https://github.com/Endava/cats . Fuzz testing is still not widely adopted considering the obvious benefits and usually minimum setup time. Even if it's…
    comment by ludovicianul · 2024-09-13 · in Build Simple Fuzzer (2020)
  4. Rest API fuzzing with minimal configuration: https://github.com/Endava/cats
    comment by ludovicianul · 2024-03-08 · in Ask HN: What underrated open source project deserves more recognition?
  5. ▲ 1
    Yet Another REST API Fuzzer
    story by ludovicianul · 2023-10-20 · 0 comments
  6. Out of this frustration I've built: https://github.com/Endava/cats . It's for APIs, but mostly addressing exactly this case: don't use strings for everything, if you choose to use it though, make sure you add patterns for checking if…
    comment by ludovicianul · 2023-07-13 · in CWE Top Most Dangerous Software Weaknesses
  7. …just complexity with little benefits. But frameworks like https://github.com/karatelabs/karate or https://github.com/Endava/cats are hiding this complexity and remove the code layer entirely. Which, in my view, this is where you need to be…
    comment by ludovicianul · 2023-03-03 · in Cucumber maintainer has been laid off
  8. I've built a tool specifically to test if these kind of characters will reach API backends: https://github.com/Endava/cats . My idea was that APIs should explicitly reject or sanitise input containing such characters.
    comment by ludovicianul · 2022-12-05 · in Invisible Characters
  9. ▲ 1
    REST API fuzzer with minimum configuration
    story by ludovicianul · 2022-10-11 · 0 comments
  10. These might help: * https://github.com/Endava/cats * https://github.com/google/oss-fuzz
    comment by asicsp · 2022-05-26 · in Learnings from 5 years of tech startup code audits
  11. Here you go: https://github.com/Endava/cats
    comment by ludovicianul · 2022-05-13 · in Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
  12. This is great :) You can then fuzz your APIs for issues using https://github.com/Endava/cats .
    comment by ludovicianul · 2022-05-13 · in Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
  13. ▲ 2
    Harden Your REST APIs with this OpenAPI Fuzzer
    story by ludovicianul · 2022-03-09 · 0 comments
  14. I've written an API Fuzzer that (among other things) tests specifically for things like this: https://github.com/Endava/cats (with a lot more other unicode special chars). People many times forget how big the Unicode standard is and that a…
    comment by ludovicianul · 2022-02-16 · in How can you be fooled by the U+202E trick? (2013)
  15. ▲ 1
    Show HN: OpenAPI Fuzzer written in Java, compiled to native code
    story by ludovicianul · 2021-12-21 · 1 comment
  16. ▲ 3
    Cats – OpenApi fuzzer an negative testing tool
    story by ludovicianul · 2021-11-24 · 0 comments
  17. …especially oneOf, anyOf relations. I went through this journey while writing a similar tool: https://github.com/Endava/cats . Currently it has 72 Fuzzers registered which cover quite a lot of scenarios.
    comment by ludovicianul · 2021-11-16 · in Show HN: OpenAPI fuzzer – fuzzing APIs based on OpenAPI specification
  18. …a similar note, if you want to test your REST APIs for weird characters, I built a tool for this: ( https://github.com/Endava/cats#leadingcontrolcharsinfieldstr... )
    comment by ludovicianul · 2021-11-10 · in The Invisible JavaScript Backdoor
  19. ▲ 2
    Cats: No Code Automated API Testing. Remove the Boring Part from API Testing
    story by ludovicianul · 2021-07-14 · 0 comments
  20. ▲ 1
    CATSv5-Generate and run API tests at runtime-now includes security fuzzers
    story by ludovicianul · 2020-10-02 · 0 comments
  21. ▲ 2
    Generate fully working API tests with no coding effort
    story by ludovicianul · 2020-09-15 · 0 comments
  22. ▲ 8
    Show HN: Generate API tests for OpenAPI endpoints
    story by ludovicianul · 2020-04-07 · 0 comments
  23. ▲ 3
    Show HN: Cats – Automatically generate and run API tests against OpenAPI APIs
    story by ludovicianul · 2020-04-06 · 0 comments