Category: API Hacking Techniques
-
Detecting Uncommon Headers in an API using Burp Bambda Filters
Learn how to write Bambda filters in Burp Suite that can automatically detect uncommon headers in the APIs you are testing.
-
Exploiting an API with Structured Format Injection
Learn how to use Structured Format Injection (SFI) through Server Side Parameter Pollution (SSPP) to exploit an API.
-
Finding “dark data” in an API
Learn how to find “dark data” in the responses to API calls you make during your security testing engagements.
-
Writing Burp Bambda Filters Like a Boss
Learn how to write your own Bambda filters in Burp Suite to do complex filtering of your proxy HTTP history.
-
Using Chaos Engineering To Hack An API
Learn how to use chaos engineering to break an API on purpose to find new types of vulnerabilities that you don’t normally find in testing.
-
Uncovering Elusive API Targets via VHOST Discovery
Learn how to uncover elusive dev, test, and production instances of an API hidden behind virtual hosting through VHOST discovery.
-
Bypassing API rate limiting using IP rotation in Burp Suite
Learn how to bypass API rate limiting security controls using IP rotation in Burp Suite via Amazon API Gateway.
-
API Recon Tip: Using AI to “Eyeball” your targets
Learn how to use the AI in Eyeballer from BishopFox to help identify interesting targets during recon of your web apps & APIs.
-
Proving API exploitability with Burp Collaborator
Learn how to prove API exploitability through the use of the Burp Collaborator for out-of-band application security testing (OAST).
-
Finding Hidden API Endpoints Using Path Prediction
Learn how to use contextual discovery and path prediction to find hidden API endpoints during your security testing.