CTF Walkthrough- Hacking An API with Snyk
Detailed walkthrough of API hacking in a Capture The Flag challenge, demonstrating practical offensive security techniques and vulnerability exploitation.
Critical Bounties via Leaked API Keys
Discover techniques for finding leaked API keys on GitHub, both manually and using tools like TruffleHog. Learn how to leverage these findings for potential critical bounties in bug hunting.
Hacking APIs - Fuzzing 101
Learn API fuzzing techniques for penetration testing and security assessment, with hands-on lab demonstrating practical application and methodology.
API Information Disclosure - Real-World Bug Hunting
Explore API information disclosure vulnerabilities and learn effective techniques for identifying and exploiting these security weaknesses in web applications.
Hacking and Defending APIs - Red and Blue Make Purple
Comprehensive guide to API security: attack techniques, defense strategies, and best practices for both testers and defenders. Covers BOLA, authentication, data exposure, and more.
API Security Through External Attack Surface Management
Integrating APIs into External Attack Surface Management to improve security posture of external-facing APIs. Discusses challenges in asset visibility and strategies for effective protection.
JWTs - Patterns and Anti-patterns in Authentication
Explore JWT use cases, patterns, and anti-patterns for secure authentication. Learn best practices and alternatives for implementing stateless tokens in web applications.
API Security Best Practices and Guidelines - 2016
Explore industry-leading best practices for designing secure APIs, navigating standards, and protecting both public and private APIs to maximize benefits while keeping threats at bay.
Easy Mobile Hacking: Native and Hybrid Pitfalls - 2016
Uncover common vulnerabilities in mobile apps, both native and hybrid, using free tools. Learn to identify and exploit configuration weaknesses across Android and iOS platforms.
Five Key Trends in Application Security
Explore five crucial application security trends: cloud migration, CDN diversity, API proliferation, compliance challenges, and expanding attack surfaces. Gain insights into cybercriminal tactics and industry recommendations.
Secure React Native Apps Against API Abuse
Aprenda a proteger aplicativos React Native contra abusos de API, explorando vulnerabilidades comuns e implementando estratégias de defesa eficazes para garantir a segurança de seus aplicativos móveis.
Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSec EU 2017
Explore CORS misconfigurations and their security implications, including real-world attacks on bitcoin exchanges and Google. Learn about subtle vulnerabilities and exploit techniques for web security professionals.
Webhooks Hookups - Abusing API Developers
Explore the security risks of Webhooks in API development, including potential vulnerabilities, real-world examples, and preventive measures. Learn about a new toolkit for auditing Webhook exposure.
How to Break APIs - Security Testing Techniques
Comprehensive guide to identifying and exploiting vulnerabilities in APIs, focusing on practical techniques for security testing and penetration.
Understanding the API Attack Vector - How Attackers Exploit Application Communications
Explore attacker techniques for targeting API-driven applications, including code manipulation, mobile vulnerabilities, and advanced attacks. Learn strategies to secure apps in cloud-native environments.
Don't Worry, Be API - Addressing AppSec's Modern Challenge
Explore modern API security challenges and solutions, including OWASP API Security Top 10, authentication issues, and authorization vulnerabilities in this comprehensive overview.
Hack Your APIs in 15 Minutes or Less - Exploiting Shadow APIs and Data Vulnerabilities
Learn to identify and exploit API vulnerabilities, understand hacker techniques, and explore creative methods for data theft in this eye-opening talk on modern cybersecurity challenges.
A Risk-Based Approach to API Security
Explore a risk-based approach to API security, focusing on threat modeling, vulnerability assessment, and mitigation strategies to enhance your organization's API protection.
Hacking and Defending APIs - Red and Blue Make Purple
Learn techniques for both attacking and defending APIs, combining offensive and defensive security perspectives to enhance overall API protection.
Landmines in the API Landscape
Explore potential security vulnerabilities in API development and learn strategies to mitigate risks in this insightful talk by a cybersecurity expert.
vAPI: Vulnerable Adversely Programmed Interface - OWASP API Top 10
Explore and exploit API vulnerabilities using vAPI, a lab environment mimicking OWASP API Top 10 scenarios. Ideal for developers and penetration testers to understand and address common API security issues.