Tool report: EvoMaster—black and white box search-based fuzzing for REST, GraphQL and RPC APIs
In this paper, we present the latest version 3.0.0 of EvoMaster, an open-source search-based fuzzer aimed at Web APIs. We discuss and present all its recent improvements, including advanced white-box heuristics, advanced search algorithms, support for databases and external services, as well as dealing with GraphQL and RPC APIs besides the original use case for REST APIs. The tool's installers have been downloaded more than 3000 times. EvoMaster is in daily use for fuzzing millions of lines of code in hundreds of APIs in large Fortune 500 companies, such as for example the e-commerce Meituan.
Authors
- Juan Pablo Galeotti (ORCID: https://orcid.org/0000-0002-0747-8205)
- Andrea Arcuri (ORCID: https://orcid.org/0000-0003-0799-2930)
- Amid Golmohammadi (ORCID: https://orcid.org/0000-0002-2324-5794)
- Onur Duman (ORCID: https://orcid.org/0000-0002-2489-8981)
- Susruthan Seran (ORCID: https://orcid.org/0000-0003-1800-060X)
- Man Zhang
- Agustina Aldasoro
- Hernan Ghianni
Institutions
- OsloMet – Oslo Metropolitan University (NO)
- Universidad de Buenos Aires (AR)
- Høyskolen Kristiania (NO)
- Universidad Metropolitana (PR)
- Beihang University (CN)
Publication Details
- Journal
- Automated Software Engineering
- Published
- 2024-11-29
- DOI
- https://doi.org/10.1007/s10515-024-00478-1
- Citations
- 11
- Primary Topic
- Software Testing and Debugging Techniques
- Type
- article
- Field-Weighted Citation Impact
- 5.34
Funders
- European Commission
- European Research Council
- Secretaría de Ciencia y Técnica, Universidad de Buenos Aires