search

flipkart-incubator / Astra

Automated Security Testing For REST API's
Apache License 2.0
2.49k stars 396 forks source link

how to use the web based interface #84

Closed Jennifer0099 closed 5 years ago

Jennifer0099 commented 5 years ago

Hello, can I use this software to test the facebook APIs and how can I do that. From the screenshot, I see the URL is http://localhost/checkout.php, so do I need to use the API that I want to test to connect to the localhost website through a software like POSTMAN? Because I am just a beginner with APIs, so I don't know how to use this testing software.

sagarpo commented 5 years ago

@Jennifer0099 You can check this video: https://www.youtube.com/watch?v=EXAO-187ygI. Hope this will help.

Jennifer0099 commented 5 years ago

Thanks so much! This is helpful and now I know the localhost is not a must, but I still don't know how can I get the information like URL, Header, and Bodies.

sagarpo commented 5 years ago

@Jennifer0099 What's the use case here?

Jennifer0099 commented 5 years ago

I am doing a project based your code, and I want to test whether the software can realize the functions it claims and how well it can perform that. And maybe I also need to know how this software can do that. I read something about RESTful API, so I have a rough idea of this area now, but just some theoretical staff. And now I want to find some opensource APIs to test, like Twitter and Facebook.

sagarpo commented 5 years ago

If you want to scan for security vulnerabilities, you need to have valid URL, headers and body. That you can find out developer docs for Facebook!

Jennifer0099 commented 5 years ago

Thanks, so I need to understand the endpoints of the APIs then I can know how to get the valid URL, headers and body, right? image

sagarpo commented 5 years ago

Yes