API fuzz testing can be one of the most effective and efficient methods for both security and automation testing. API fuzz testing involves generating fuzz data as data input, sending HTTP requests with fuzz data, and analyzing the HTTP response for security issues. We will demonstrate several API fuzz automation tools (Wfuzz and 0d1n), fuzz techniques, and integration with automation testing frameworks (Selenium and Robot Framework DDT) in this chapter.

The topics that will be covered here are as follows:

• Fuzz testing and data
• API fuzz testing with automation frameworks (Wfuzz, 0d1n Selenium DDT, and Robot Framework DDT)