Generates security test cases covering OWASP Top 10 vulnerabilities for APIs or web apps. Do NOT use for production penetration testing or exploitation.
Generate automated security tests for OWASP Top 10 vulnerabilities to verify controls and fix flaws before deployment.
| Variable | Type | Req | Description |
|---|---|---|---|
target_description | string | Yes | App/API description |
tech_stack | string | Yes | e.g., "Node.js + Express" |
owasp_categories | string | No | Default: all Top 10 |
| Case | Strategy |
|---|---|
| Auth | Create test users in setup to probe protected endpoint boundaries. |
| Rate Limiting | Use bypasses or sequential execution to avoid blocking tests. |
| HTTPS | Skip TLS/header tests if target environment is not production-like. |
flowchart TD
A([Start: Security Test Writing]) --> B[Parse inputs]
B --> C{Categories specified?}
C -- Yes --> D[Focus on specified]
C -- No --> E[Cover all OWASP Top 10]
D & E --> F[A01: Access Control]
D & E --> G[A03: Injection]
D & E --> H[A07: Auth Failures]
D & E --> I[A05: Misconfiguration]
D & E --> J[A10: SSRF]
D & E --> K[A02: Crypto Failures]
F & G & H & I & J & K --> L{Auth required?}
L -- Yes --> M[Create test users in setup]
L -- No --> N
M & N --> O{Rate limiting?}
O -- Yes --> P[Use bypass or sequential execution]
O -- No --> Q
P & Q --> R[Write each test case]
R --> S{HTTPS environment?}
S -- No --> T[Skip TLS tests]
S -- Yes --> U[Include crypto tests]
T & U --> V([Output: Security Test File])
| Version | Date | Description |
|---|---|---|
| 1.1.0 | 2026-03-20 | Restructured: moved examples, references, added compatibility/license |
| 1.0.0 | 2026-03-20 | Initial release |