Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Provision for API testing

Netaji | Last updated: Oct 30, 2017 09:12AM UTC

Is there any provision for API Testing in Burp ? if yes, please let me know the procedure or any documentation.

Liam, PortSwigger Agent | Last updated: Oct 30, 2017 09:20AM UTC

We're in the process of creating a series of support pages for testing API's using Burp Suite. Are you having a specific issue testing an API? Could you provide us with some additional detail?

Burp User | Last updated: Nov 03, 2017 05:41AM UTC

Can u test SOAP / REST API using Burp suite only ?

Burp User | Last updated: Nov 03, 2017 05:48AM UTC

Can we test SOAP / REST API using Burp suite only ?

Liam, PortSwigger Agent | Last updated: Nov 03, 2017 09:08AM UTC

Burp can test any REST API endpoint, provided you can use a normal client for that endpoint to generate normal traffic. The process is to proxy the client's traffic through Burp and then test it in the normal way. - https://support.portswigger.net/customer/portal/articles/2898121-using-burp-to-enumerate-a-rest-api - https://support.portswigger.net/customer/portal/articles/2898216-using-burp-to-test-a-rest-api You can automate this process with SOAP endpoints via WSDL files: - https://portswigger.net/bappstore/bapps/details/594a49bb233748f2bc80a9eb18a2e08f Please let us know if you need any further assistance.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.