A Brief Guide to Gray Box Testing

In software testing, gray box testing is a useful technique for ensuring that published software is performant, safe, and meets the needs of intended users. It's a convenient approach to test apps from the outside while keeping track of their internal operations.

Gray box testing combines the benefits of both black box and white box testing. This type of testing is done with limited knowledge of the application's underlying code and architecture, and it can be done manually or automatically.

Penetration Test Types for (REST) API Security Tests

Black Box, Grey Box, and White Box Pen Tests

In my last article, we discussed Penetration tests, or pen tests, the importance of pen tests, and how it helps to find the REST API vulnerabilities. 

This article gives a brief overview of one of the pen tests type called white box pen tests. There are two more types called black box and grey box testing. However, black box and grey box penetration tests assume the tester has only limited knowledge about the target system, and this article focus is on API pen tests also discussed a few details on why it is a preferred test type of API penetration tests and summarized with a few tools that enable the pen tests for our APIs.