CakeFuzzer
An automated IAST fuzzer for discovering vulnerabilities in CakePHP web applications with minimal false positives.
What is CakeFuzzer?
CakeFuzzer is an open-source Interactive Application Security Testing (IAST) fuzzer specifically designed for CakePHP web applications. It automatically discovers vulnerabilities like SQL injection and XSS by executing controlled attacks while monitoring application behavior, aiming to produce near-zero false positives. The tool requires no prior knowledge of the application's internals or manual configuration to begin scanning.
Security researchers, penetration testers, and developers maintaining CakePHP applications who need an automated, accurate way to identify security vulnerabilities during development or auditing.
Developers choose CakeFuzzer because it combines the thoroughness of white-box testing with the practicality of black-box fuzzing, offering high detection rates with minimal false positives without requiring deep security expertise to operate.
Overview
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
Use Cases
Best For
- Automated security testing of CakePHP applications in CI/CD pipelines
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
