APICheck: toolset designed and created for testing REST APIs

by do son ·

What’s APICheck

APICheck is a complete toolset designed and created for testing REST APIs.

Why another REST APIs tool?

It aims to be a universal toolset for testing REST APIs, allowing you to mix and match the tools it provides while enabling interoperability with third-party tools. This way we hope that it will be useful to a wide spectrum of users that need to deal with REST APIs.

Who is APICheck for?

It focuses not only on the security testing and hacking use cases, the goal of the project is to become a complete toolset for DevSecOps cycles. The tools are aimed to different user profiles:

  • Developers
  • System Administrators
  • Security Engineers & Penetration Testers

Pipelines & data flow

Pipelines

In *NIX, you can chain multiple commands together in a pipeline. Consider this one:

In a similar way, you can build APICheck pipelines by chaining the different tools together.

 

Data format

To allow interoperability among commands and tools, all of them share a common JSON data format. In other words, APICheck commands output JSON documents, and accept them as input, too. This allows you to build pipelines.

Install & Use

Copyright © 2017-2018 Banco Bilbao Vizcaya Argentaria S.A.