A testbed to evaluate Rusa, a feedback-driven fuzzer for Java Spring REST applications.
- Build the images using
build.sh
inscripts
. - Run the containers using
run.sh
inscripts
.
You need Docker and don't forget git submodules.
git submodule update --init --recursive
rusa.jar
: latest Rusavulnserver.jar
: vulnerable server to testopenapi.yml
: REST API definition of the vulnerable server
- Rusa: Rusa
- RESTler modified: RESTler /w dynamic feedback
- RESTler original: RESTler