I am very new in security testing.

It will be very helpful if any one can suggest open-source/free tools that can run Scans for security issues (E.G SQL Injection) on REST APIs which use JSON requests.

Some services also use OAUTH.


  • Are tools that require access to your source code OK? – Nicolas Raoul Jun 20 '16 at 8:51
  • @NicolasRaoul I thinks, I will not be given access to source code, but still I can try. Please share the tools. Thanks – Samarth Jun 20 '16 at 9:11

SQL Injection

Please find the following tools which can detect SQL injection vulnerabilities on web applications:

  • BSQL Hacker - an automated SQL Injection Framework / Tool designed to exploit SQL injection vulnerabilities in virtually any database.
  • SQL Ninja - a SQL Server injection & takeover tool.
  • sqlmap - an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws.
  • Absinthe - a blind SQL exploitation application.

Web-browser extensions:

Web services

Vulnerability scanners

For web penetration testing tools, see: Testing a server for security vulnerabilities


For PHP malware scanners, see: Malware scanner for websites code?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.