[3] Gray-box testers require both high-level and detailed documents describing the application, which they collect in order to define test cases.
Some assumptions are stated below which are needed for the application of use gray-box testing.
Cem Kaner defines "gray-box testing as involving inputs and outputs, but test design is educated by information about the code or the program operation of a kind that would normally be out of view of the tester".
As we know, white-box testing is not suitable for Web services as it deals directly with the internal structures.
White-box testing can be used for state art methods; for example, message mutation which generates the automatic tests for large arrays to help exception handling states, flow without source code or binaries.