Methodology and tools used in API Testing Introduction

Performing pentests in APIs for many is a complex task, especially in some cases that do not have documentation to facilitate testing, thus having to perform a black box test that may or may not bring significant results.

In addition, doubts arise about tools and methods that can be used to test an API, mainly because it contains different types of designs and protocols. Therefore, testing a REST API, SOAP and GRAPHQL requires knowing a little about the architecture of each one…