Even in the case of Web API applications, there is no difference in scanning processes for proxy logs (request/response) recorded in Vex.
As long as proxy logs can be acquired, scan settings and processes are the same as usual.
When your application doesn't support a browser or doesn't provide an interface, you can take one of the following ways to send a request.
- "Import API spec." *available in ver.8.0 and later
This feature automatically generates request information based on the specification by directly importing the OpenAPI (version 3.0) specification.
See User Guide "Import API spec." for details on how to use it.
*The HTTP response will be obtained by sending the request information after importing specification, but if errors occur, you need to change the content of the HTTP request manually.
- "Web API Client" tool
This tool enables you to create any HTTP requests.To download the tool, click the "Spanner (tool) icon" at the upper right of Vex screen> choose "Web API Client".
For the detail on the "Web API Client" tool, see User Guide "Web API Client".