Skip to main content
Share Your Experience: Take the 2024 Developer Survey

New answers tagged

0 votes

Which tool to use to automate REST API pentest

It has a couple of tests that you should make sure about API testing; in terms of macro understanding, you should care about data in transit using these types of services: Certificates Check: Check ...
FabioNoth's user avatar
2 votes

Which tool to use to automate REST API pentest

For ZAP you can either use the API packaged scan https://www.zaproxy.org/docs/docker/api-scan/ (which runs in Docker & has a GitHub action) or a custom Automation Framework plan https://www....
Simon Bennetts's user avatar
0 votes

Securely store password for API sessions

There are two options, depending on which protocols the external API supports -- or whether you can add new ones. Ideally, the client shouldn't share their API token/password at all. A much better ...
Ja1024's user avatar
  • 7,861

Top 50 recent answers are included