You're viewing the current stable version of the Web Security Testing Guide project.

Store Donate Join

This website uses cookies to analyze our traffic and only share that information with our analytics partners.

Accept

x

Store

Donate

Join

WSTG - v4.2

Home > V42 > 4-Web Application Security Testing > 12-API Testing

4.12 API Testing

4.12.1 Testing GraphQL

Watch Star

The OWASP^® Foundation works to improve the security of software through its community-led open source software projects, hundreds of chapters worldwide, tens of thousands of members, and by hosting local and global conferences.

WSTG Contents (v4.2)

Filter contents

0. Foreword by Eoin Keary
1. Frontispiece
2. Introduction
3. The OWASP Testing Framework
4. Web Application Security Testing
5. Reporting
Appendix A. Testing Tools Resource
Appendix B. Suggested Reading
Appendix C. Fuzz Vectors
Appendix D. Encoded Injection
Appendix E. History
Appendix F. Leveraging Dev Tools

Upcoming OWASP Global Events

Corporate Supporters

Become a corporate supporter

HOME
PROJECTS
CHAPTERS
EVENTS
ABOUT
PRIVACY
SITEMAP
CONTACT

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc. Unless otherwise specified, all content on the site is Creative Commons Attribution-ShareAlike v4.0 and provided without warranty of service or accuracy. For more information, please refer to our General Disclaimer. OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide. Copyright 2026, OWASP Foundation, Inc.