Tool report: EvoMaster-black and white box search-based fuzzing for REST, GraphQL and RPC APIs

Andrea Arcuri1,2, Man Zhang3, Susruthan Seran1

  • 1School of Economics, Innovation, and Technology, Kristiania University College, Kirkegata 24-26, 0153 Oslo, Norway.

Automated Software Engineering
|December 2, 2024
PubMed
Summary

EvoMaster 3.0.0 enhances web API fuzzing with advanced heuristics and broader API support. This open-source tool improves security testing for REST, GraphQL, and RPC APIs, benefiting large enterprises.

Related Concept Videos

Leaky Scanning02:28

Leaky Scanning

During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA.  Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.1K
Trial and Error and Algorithm01:12

Trial and Error and Algorithm

A problem-solving strategy is a plan of action used to find a solution. Different strategies have distinct action plans. Trial and error involves trying different solutions until one works. For instance, to fix a broken printer, you might check ink levels, ensure the paper tray isn't jammed, and verify the printer's connection to your laptop. This method can be time-consuming but is commonly used. Thomas Edison, for example, used trial and error to find a suitable filament for the light...
92
Quality Assurance01:19

Quality Assurance

Quality assurance is the overarching term used to describe the activities employed to ensure the proper performance of a system. These activities can be classified into three categories: quality control, quality assessment, and internal corrective measures. Typically, these activities work cyclically: quality control is performed before and during the analysis, while quality assessment occurs during and after the investigation. Internal corrective measures are implemented based on the findings...
115
Elasticity01:12

Elasticity

Elasticity is the ability of an object to withstand the effects of distortion and to return to its original size and shape once the forces causing deformation are removed. When an elastic material deforms under the action of an external force, it experiences internal resistance to the deformation. However, if no external force is applied, it returns to its original state.
The elasticity of an object can be described by a stress-strain curve, which represents the relationship between stress...
3.4K
Detection of Black Holes01:10

Detection of Black Holes

Although black holes were theoretically postulated in the 1920s, they remained outside the domain of observational astronomy until the 1970s.
Their closest cousins are neutron stars, which are composed almost entirely of neutrons packed against each other, making them extremely dense. A neutron star has the same mass as the Sun but its diameter is only a few kilometers. Therefore, the escape velocity from their surface is close to the speed of light.
Not until the 1960s, when the first neutron...
2.2K
Slump Test01:20

Slump Test

The slump test is a widely used method to measure the workability of concrete. It employs a 12-inch high truncated cone mold that tapers from eight inches at the base to four inches at the top. Before testing, the mold is securely attached to a flat base and dampened.
Concrete is poured into the mold in three layers to conduct the test. Each layer is compacted 25 times with a steel tamping rod, which has a five-eighths-inch diameter and a rounded end, to ensure even distribution and eliminate...
143