Even in the case of WebAPI scanning,
there is no difference in the testing process for the proxy logs(request/response) recorded in Vex.
(If proxy logs can be acquired, scan settings and processes are same as usual.)
If the application is not supported by the browser or the interface is not available,
it is possible to send the HTTP request(recording proxy logs) by the procedures as bellow.
- Use "Import API spec." function *available from ver.8.0
By using this function, you can create automatically the HTTP request which is based on the Web API spec.
For the detail of the procedure, please refer the chapter "Import API spec." of the Vex User Guide.
*note: If something error message (or unexpected response) is responsed, please change the HTTP request manually.
- Use "Web API Client" tool
It is a tool which you can create and send any HTTP requests.
To download the "Web API Client",
click the "Spanner (tool) icon" at the upper right of the screen of Vex > choose "Web API Client".
For the detail of the tool, please refer the chapter "Web API Client" of the Vex User Guide.