PT0-002 · Question #130
A penetration tester is preparing to conduct API testing. Which of the following would be MOST helpful in preparing for this engagement?
The correct answer is D. Swagger. Swagger is an open specification for defining REST APIs. A Swagger document is the REST API equivalent of a WSDL document for a SOAP-based web service. The Swagger document specifies the list of resources that are available in the REST API and the operations that can be called…
Question
A penetration tester is preparing to conduct API testing. Which of the following would be MOST helpful in preparing for this engagement?
Options
- ANikto
- BWAR
- CW3AF
- DSwagger
How the community answered
(42 responses)- A5% (2)
- C2% (1)
- D93% (39)
Explanation
Swagger is an open specification for defining REST APIs. A Swagger document is the REST API equivalent of a WSDL document for a SOAP-based web service. The Swagger document specifies the list of resources that are available in the REST API and the operations that can be called on those resources. It also specifies the list of parameters to an operation, including the name and type of the parameters, whether the parameters are required or optional, and information about acceptable values for those parameters. So, access to a Swagger document provides testers with a good view of how the API works and thus how they can test it.
Topics
Community Discussion
No community discussion yet for this question.