The spring season is a time of new beginnings. The days are getting longer and the weather is getting warmer and I've just starred our open source with it's 300 star ⭐ https://github.com/blst-security/cherrybomb

In my last article I promised I'll write about 5 API testing tools, API testing is a type of software testing that involves testing application programming interfaces (APIs) to determine if they are working as intended. API testing is a critical part of the software development process because APIs are when applications interact with each other. API testing can be used to test both internal and external APIs.

🚜 Lets dig in and learn about these 5 open source tools

Astra

https://github.com/flipkart-incubator/Astra

Astra is extremely easy to use. Simply point your browser to the Astra URL, enter your API key, and start making requests. There is no need to install any software or libraries.

Astra is a great choice for testing APIs. It is easy to use and provides all the features you need to ensure your API is functioning correctly.

Cherrybomb

https://github.com/blst-security/cherrybomb

Stop with half-done API specifications! Cherrybomb is a CLI tool that helps you avoid undefined user behavior by validating your API specifications.
Cherrybomb is a command line tool that helps you make sure that your API specifications are clear to users.

Our CLI tool is open source, which means it can get help from both the OpenAPI and Rust communities.

How does it work?

It takes in an OAS file, runs a series of checks on it to make sure everything is on par with the OAS, and outputs a detailed table with any alerts found, guiding you to the exact problem and location to help you solve it quickly.
It can also take your logs and check them for business logic flaws.
Check out the roadmap here: https://github.com/blst-security/cherrybomb#-roadmap Incredible features such as Homebrew/APT, custom scans, and GraphQL are planned.

crAPI

https://github.com/nestor-custodio/crapi

Recently, I've started using a great API testing tool called crAPI. It has helped me immensely. I would highly recommend it to anyone who is looking for a tool to help them with their API development.
crAPI is a great tool for testing APIs. It is very easy to use and has a lot of features that make it very powerful. One of the best features of crAPI is the ability to run tests in parallel. This is a great feature because it allows you to test multiple APIs at the same time. This can save you a lot of time when you are testing large APIs.

crAPI also has a great feature that allows you to test your API with different data sets. This is a great feature because it allows you to see how your API will behave with different data. This can be very helpful when you are developing an API that will be used by many people.
Overall, I think crAPI is a great tool for testing APIs. It is very easy to use and has a lot of great features. I would highly recommend it to anyone who is looking for a tool to help them with their API development.

hawk

https://github.com/mozilla/hawk

If you're like me, you're always on the lookout for new tools to make your life as a tester easier. So when I came across Hawk, I was intrigued. Hawk is a tool designed to help you with API testing. It's pretty simple to use, and it has a lot of great features. In this article, I'll show you how to use Hawk for API testing and I'll give you some examples of how it can be used.

Hawk is a tool that helps you test APIs. It's easy to use, and it has a lot of great features. One of the best things about Hawk is that it can be used for both manual and automated testing. Manual testing is great for exploring an API and trying out different scenarios. Automated testing is great for running a large number of tests quickly and efficiently. Hawk can help you with both of these types of testing.

Hawk is a great tool for API testing. It's easy to use, and it has a lot of great features. If you're looking for a tool to help you with API testing, I highly recommend Hawk.

imperva

https://github.com/imperva/automatic-api-attack-tool
In the world of cybersecurity, as far as I know, there are also many tools available to help test the security of applications.

The Imperva Automatic API Attack Tool is a tool that helps developers test the security of their APIs. It does this by automatically sending requests to the API and then assessing the responses. If the responses indicate that the API is not secure, the tool will report this to the developers.

In order to use the Imperva Automatic API Attack Tool, developers first need to sign up for an account. Once they have done so, they can then create a new project. Within this project, they will need to specify the API that they want to test. Once they have done so, the tool will begin automatically sending requests to the API.

The Imperva Automatic API Attack Tool is a valuable tool for developers as it can help them identify security issues with their APIs. By using this tool, developers can make sure that their APIs are secure and that they are not susceptible to attack.

In the next article I will write about business logic security testing

Thanks for reading 😊