I am very new in security testing.
It will be very helpful if any one can suggest open-source/free tools that can run Scans for security issues (E.G SQL Injection) on REST APIs which use JSON requests.
Some services also use OAUTH.
Software Recommendations Stack Exchange is a question and answer site for people seeking specific software recommendations. It only takes a minute to sign up.Sign up to join this community
Please find the following tools which can detect SQL injection vulnerabilities on web applications:
sqlmap- an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws.
For web penetration testing tools, see: Testing a server for security vulnerabilities
For PHP malware scanners, see: Malware scanner for websites code?