Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is there any tool to perform penetration/vulnerability testing on REST web services ?

share|improve this question
    
Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve. –  e-sushi Jul 24 '13 at 17:15
add comment

closed as too broad by Gilles, Adnan, NULLZ, Eric G, TildalWave Jul 25 '13 at 7:28

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer

To test REST web service I intercept the traffic from a legitimate client and then fuzz the intercepted requests using BURP's intruder module. OWAP's ZAP is free and will also do the trick.

When you fuzz any interface you need to have custom data set and you need to understand what can go wrong and how to identify vulnerabilities. This is not something for a novice to undertake.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.