Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The cats tool looks interesting I'm curious how it handles fuzzing id columns, which would need a reference to another resource to actually test them. I would like a tool which can take insertion order of the api and start inserting things at random based on a spec to test it.


Can you please detail a bit?

Currently, there is some support for resource correlation. Especially when fuzzing DELETE, it will identify a successful POST based on conventions and use that as an identifier. Also checking that DELETEd resources are not available anymore.


Say i have an order record, it needs company and product. The fuzzer should be smart enough to first generate company and product then use them to create orders. Similarly the fuzzer should be able to build a whole graph of the api data model and be able to execute actions on it in a particular order testing all the actions




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: