Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any tool to perform penetration/vulnerability testing on REST web services ?

share|improve this question

closed as too broad by Gilles, Adi, NULLZ, Eric G, TildalWave Jul 25 '13 at 7:28

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve. – e-sushi Jul 24 '13 at 17:15

To test REST web service I intercept the traffic from a legitimate client and then fuzz the intercepted requests using BURP's intruder module. OWAP's ZAP is free and will also do the trick.

When you fuzz any interface you need to have custom data set and you need to understand what can go wrong and how to identify vulnerabilities. This is not something for a novice to undertake.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.