The invention provides an
information system routing and API (Application Program Interface) scanning test tool, and relates to the technical field of
information technology security testing, and the tool comprises the following steps: carrying out target survival
verification on a target URL (
Uniform Resource Locator); generating a complete absolute URL
list; obtaining an independent path component, and generating an ordered and de-duplicated to-be-scanned path combination
queue through depth-controllable
Cartesian product operation; the to-be-scanned path combination
queue is scanned in a multi-thread concurrent mode through the intelligent scanning work module, and meanwhile the
system resource utilization rate is collected and displayed in real time through the
system resource monitoring module; in the scanning process, the intelligent scanning work module receives and applies configuration parameter updating from the
visual interaction interface module in real time; scanning response results are collected and filtered, and the results are stored in real time; while the scanning comprehensiveness and the
system stability are ensured, the
overall efficiency of the scanning test and the user experience are greatly improved.