Tools

RestTestGen [GitHub]

RestTestGen is a robust tool and framework designed for automated black-box testing of RESTful web APIs. As a testing tool, it incorporates various testing strategies for identifying bugs and vulnerabilities within the API being tested. Operating exclusively as a black-box end-to-end testing tool, it interacts with the API solely through HTTP, without necessitating access to the source code. The only requirement is an OpenAPI specification of the API being tested.

In addition to its role as a testing tool, RestTestGen also serves as a framework, offering multiple components and features to assist researchers, practitioners, and developers in implementing custom testing strategies for web APIs. This framework empowers users to tailor their testing approach to specific requirements and explore innovative methods to enhance their API testing strategies.

Restats [GitHub]

A test coverage tool for web API test suites that computes the level of coverage of an OpenAPI specification (as defined by Martin-Lopez et al.) based on the HTTP interactions of a test suite.