GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → microsoft → Rest Api Fuzz Testing

microsoft / Rest Api Fuzz Testing

Licence: mit
REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows

Labels

apidevopsrest-apirestfuzzing

Projects that are alternatives of or similar to Rest Api Fuzz Testing

Lumen Microservice
Lumen on Docker - Skeleton project with Nginx, MySQL & PHP 7 | Aws ECS, Google Kubernates, Azure Container Engine
Stars: ✭ 183 (+53.78%)
Mutual labels:  api, rest-api, rest, devops
Apicheck
The DevSecOps toolset for REST APIs
Stars: ✭ 184 (+54.62%)
Mutual labels:  api, rest-api, rest, devops
Httpie
As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie
Stars: ✭ 53,052 (+44481.51%)
Mutual labels:  api, rest-api, rest, devops
Githubapi
Swift implementation of Github REST API v3
Stars: ✭ 55 (-53.78%)
Mutual labels:  api, rest-api, rest
Generator Http Fake Backend
Yeoman generator for building a fake backend by providing the content of JSON files or JavaScript objects through configurable routes.
Stars: ✭ 49 (-58.82%)
Mutual labels:  api, rest-api, rest
Rest Control
Framework for testing and validation REST services
Stars: ✭ 51 (-57.14%)
Mutual labels:  api, rest-api, rest
Apidoc
RESTful API 文档生成工具，支持 Go、Java、Swift、JavaScript、Rust、PHP、Python、Typescript、Kotlin 和 Ruby 等大部分语言。
Stars: ✭ 785 (+559.66%)
Mutual labels:  api, rest-api, rest
Rest Hapi
🚀 A RESTful API generator for Node.js
Stars: ✭ 1,102 (+826.05%)
Mutual labels:  api, rest-api, rest
Api Strategy
Equinor API Strategy
Stars: ✭ 56 (-52.94%)
Mutual labels:  api, rest-api, rest
Airdcpp Webclient
Communal peer-to-peer file sharing application for file servers/NAS devices
Stars: ✭ 106 (-10.92%)
Mutual labels:  api, rest-api, rest
Apy
Apy is a simple client-side library for making rest api ajax calls.
Stars: ✭ 68 (-42.86%)
Mutual labels:  api, rest-api, rest
Axios Rest
A simple axios wrapper to make rest api call delightful
Stars: ✭ 41 (-65.55%)
Mutual labels:  api, rest-api, rest
Discord4j
Discord4J is a fast, powerful, unopinionated, reactive library to enable quick and easy development of Discord bots for Java, Kotlin, and other JVM languages using the official Discord Bot API.
Stars: ✭ 973 (+717.65%)
Mutual labels:  api, rest-api, rest
Json Api Dart
JSON:API client for Dart/Flutter
Stars: ✭ 53 (-55.46%)
Mutual labels:  api, rest-api, rest
Ngx Restangular
Restangular for Angular 2 and higher versions
Stars: ✭ 787 (+561.34%)
Mutual labels:  api, rest-api, rest
Openapi Generator
OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec (v2, v3)
Stars: ✭ 10,634 (+8836.13%)
Mutual labels:  api, rest-api, rest
Acf To Rest Api
Exposes Advanced Custom Fields Endpoints in the WordPress REST API
Stars: ✭ 1,152 (+868.07%)
Mutual labels:  api, rest-api, rest
Json Serverless
Transform a JSON file into a serverless REST API in AWS cloud
Stars: ✭ 108 (-9.24%)
Mutual labels:  api, rest-api, rest
Tiledesk Server
Tiledesk server. Tiledesk is an Open Source Live Chat platform written in NodeJs and MongoDB
Stars: ✭ 94 (-21.01%)
Mutual labels:  api, rest-api, rest
Spyke
Interact with REST services in an ActiveRecord-like manner
Stars: ✭ 591 (+396.64%)
Mutual labels:  api, rest-api, rest
View All Similar Projects ➔

REST API Fuzz Testing (RAFT)

A self hosted REST API Fuzzing-As-A-Service platform

RAFT enables painless fuzzing of REST API's using multiple fuzzers in parallel. Using a single command line baked into your CI/CD pipeline developers can launch fuzz jobs against their services.

Following Swagger/OpenAPI tools are currently supported by RAFT

Tool Description
RESTler RAFT has first class integration with this Microsoft Research tool - the first stateful fuzzing tool designed to automatically test your REST API's driven by your swagger/OpenApi specification.
ZAP RAFT supports Swagger/OpenAPI scanning functionality provided by ZAP
Dredd RAFT supports Swagger/OpenAPI scanning functionality provided by Dredd
Schemathesis RAFT supports Swagger/OpenAPI scanning functionality provided by Schemathesis

As a platform, RAFT is designed to host any API fuzzers that are packaged into a docker container. These can be configured and used in the system via configuration files and require no code changes to integrate.

Getting Started

This project is designed to run on Azure. See https://azure.com/free to create a free subscription and receive $200 in credits. You can run this service (and much more!) free for 30 days!

To deploy the service download the CLI release and run python raft.py service deploy. See the documentation for more details and the video tutorials linked below.

Once deployed, read about how to submit a job and use the samples to try out the service and fuzzers!

Documentation

Swagger Documentation

Once the service is created, you can examine the REST interface of the service by browsing to the swagger page at https://<deploymentName>-raft-apiservice.azurewebsites.net/swagger

Interesting in native code fuzzing?

Take a look at our sibling project OneFuzz

Microsoft Open Source Code of Conduct

https://opensource.microsoft.com/codeofconduct

Trademarks

Trademarks This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.

Preferred Languages

We prefer all communications to be in English.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].