Is there any tool to perform penetration/vulnerability testing on REST web services ?

closed as too broad by Gilles, Adi, NULLZ, user4895, TildalWave Jul 25 '13 at 7:28

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.


To test REST web service I intercept the traffic from a legitimate client and then fuzz the intercepted requests using BURP's intruder module. OWAP's ZAP is free and will also do the trick.

When you fuzz any interface you need to have custom data set and you need to understand what can go wrong and how to identify vulnerabilities. This is not something for a novice to undertake.

Not the answer you're looking for? Browse other questions tagged or ask your own question.