Web API fuzzing with a Web Application Module

To perform web API fuzzing with beSTORM, do the following:


  1. Open beSTORM Client.
  2. Select New Project to open the beSTORM New Project Wizard.
  3. On the Welcome page, enter a name for the project in the Project Name box.
  4. For the Please select the wizard level parameter, select Advanced.
  5. Select Next.
  6. On the Basic Configuration page, select Build a Web Application Module, and then select Learn.
  7. In the API Auto Learn dialog, under File, select OpenAPI, and then select Browse.
  8. Select Browse to navigate to and select your OpenAPI.json descriptor file, and then select Open.
  9. Select Process.
  10. In the Web API Data table, several API paths that are available to fuzz will appear. Individually select the desired paths to include in your test session or select All.
  11. Select Generate.
  12. Select Next.
  13. On the Advanced Configuration page, adjust these parameters as needed. You can further modify these parameters by customizing the final module (see the beSTORM User Guide for more information).
  14. Select Next.
  15. On the Module Environment page, review your parameter settings for the module.
  16. Select Next.
  17. On the Extra Configuration page, adjust these parameters as needed.
  18. Select Next.
  19. On the Complete beSTORM wizard page, select Finish to begin fuzzing.


Web API Fuzzing with a custom module

To fuzz a custom module, do the following:

  1. Open beSTORM.
  2. Select New Project.
  3. In the Project Name box, enter a name for the project.
  4. For the Please select the wizard level parameter, select Advanced.
  5. Select Next.
  6. On the Basic Configuration page, select Import a Custom Module from a BSM File. and then select Import.
  7. Navigate to and select your prebuilt custom module, and then select Open.
  8. Select Next.
  9. Follow steps 13-19 above to finish configuring your project.