Hacker GitHub

← All repos

Endava/cats

View on GitHub ↗ ★ 1,379 Java

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-healing and do not require maintenance.

23 mentions on Hacker News by 2 people: 10 stories, 13 comments · first 2020-04-06 · latest 2026-09-14

Mentions per year 23 mentions · busiest year 2022 (7)
20082026
AllStoriesComments NewestTopOldest
  1. …will live under a single umbrella in the future. Additionally, I'm building a REST API fuzzer: https://github.com/Endava/cats
    comment by ludovicianul · 2026-09-14 · in Ask HN: What are you working on? (September 2026)
  2. An API fuzzer I've been building for several years now: https://github.com/Endava/cats
    comment by ludovicianul · 2025-01-20 · in The Fuzzing Book
  3. I've followed similar approach for building a REST API fuzzer for the past 3 years: https://github.com/Endava/cats . Fuzz testing is still not widely adopted considering the obvious benefits and usually minimum setup time. Even if it's…
    comment by ludovicianul · 2024-09-13 · in Build Simple Fuzzer (2020)
  4. Rest API fuzzing with minimal configuration: https://github.com/Endava/cats
    comment by ludovicianul · 2024-03-08 · in Ask HN: What underrated open source project deserves more recognition?
  5. Out of this frustration I've built: https://github.com/Endava/cats . It's for APIs, but mostly addressing exactly this case: don't use strings for everything, if you choose to use it though, make sure you add patterns for checking if…
    comment by ludovicianul · 2023-07-13 · in CWE Top Most Dangerous Software Weaknesses
  6. …just complexity with little benefits. But frameworks like https://github.com/karatelabs/karate or https://github.com/Endava/cats are hiding this complexity and remove the code layer entirely. Which, in my view, this is where you need to be…
    comment by ludovicianul · 2023-03-03 · in Cucumber maintainer has been laid off
  7. I've built a tool specifically to test if these kind of characters will reach API backends: https://github.com/Endava/cats . My idea was that APIs should explicitly reject or sanitise input containing such characters.
    comment by ludovicianul · 2022-12-05 · in Invisible Characters
  8. These might help: * https://github.com/Endava/cats * https://github.com/google/oss-fuzz
    comment by asicsp · 2022-05-26 · in Learnings from 5 years of tech startup code audits
  9. Here you go: https://github.com/Endava/cats
    comment by ludovicianul · 2022-05-13 · in Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
  10. This is great :) You can then fuzz your APIs for issues using https://github.com/Endava/cats .
    comment by ludovicianul · 2022-05-13 · in Show HN: Mitmproxy2swagger – Automagically reverse-engineer REST APIs
  11. I've written an API Fuzzer that (among other things) tests specifically for things like this: https://github.com/Endava/cats (with a lot more other unicode special chars). People many times forget how big the Unicode standard is and that a…
    comment by ludovicianul · 2022-02-16 · in How can you be fooled by the U+202E trick? (2013)
  12. …especially oneOf, anyOf relations. I went through this journey while writing a similar tool: https://github.com/Endava/cats . Currently it has 72 Fuzzers registered which cover quite a lot of scenarios.
    comment by ludovicianul · 2021-11-16 · in Show HN: OpenAPI fuzzer – fuzzing APIs based on OpenAPI specification
  13. …a similar note, if you want to test your REST APIs for weird characters, I built a tool for this: ( https://github.com/Endava/cats#leadingcontrolcharsinfieldstr... )
    comment by ludovicianul · 2021-11-10 · in The Invisible JavaScript Backdoor