Comprehensive API Testing with Fortify DAST

Fortify DAST tools offer comprehensive API testing, taking into account the attack surface, authentication, attack vectors, and automation. In this video, Fortify DAST Product Manager Shawn Simpson gives an overview of Fortify's API scanning capabilities.
OpenText has completed the purchase of Micro Focus, including CyberRes. Our combined expertise expands our security offerings to help customers protect, detect, and evolve their security posture. They can confidently be their best-and more secure-across their entire organization.
LEARN MORE about Fortify: www.microfocus...
LEARN MORE about how Micro Focus was named a leader in the Gartner MQ for Application Security Testing: software.micro...
Fortify Education After Hours Homepage: community.micr...
After Hours Discussion (list of learning series): community.micr...
Education Central:
marketplace.mi...
CONNECT with the Fortify Online Community: community.micr...
- Connect with peers and share your knowledge
- Find solutions and answers to your technical questions
- Stay informed on new releases and product enhancements
- Access downloads, demos, videos and support tips

[@ikherhaal]

I would like to see a working example of "pulling in" a token. The step by step version, from a swagger file. I simply don't know how to do it.

[@FortifyUnplugged]

Noted. Thanks for your feedback, I will put this on our list of potential future videos.

[@Iam_tokyo]

is there an api for fetching all applications in fortify ssc ?

[@FortifyUnplugged]

Yes, you can see the API Reference documentation by clicking on the “?” icon in the upper right corner of SSC and clicking on the API Documentation link. Here you can learn about how to use the API. Then you can click on the API Reference link to see the swagger page and browse through the available endpoints.
To get a list of all Applications (just Applications and not App Versions), you can do something like:
curl -X 'GET' \
'localhost:8180/ssc/api/v1/projects?start=0&limit=200&fulltextsearch=false' \
-H 'accept: application/json'
If you want the Application Versions, it would be something like:
curl -X 'GET' \
'localhost:8180/ssc/api/v1/projectVersions?start=0&limit=200&fulltextsearch=false&includeInactive=false&myAssignedIssues=false&onlyIfHasIssues=false' \
-H 'accept: application/json'