Category: API Hacking Techniques
-
How Adversaries Attack APIs Through Dependencies
We must become curators of API dependencies, NOT consumers!!
-
Exploiting embedded APIs by dumping firmware
Hack the hardware to find the firmware and swipe the source code of APIs under security testing.
-
Using a Flipper Zero to access API source code on IoT devices
Hacking APIs on IoT devices using a Flipper Zero
-
5 simple questions to make your API pentest more successful
Check out these 5 simple questions that will help make your API penetration testing engagement more successful.
-
Hacking a .NET API in the real world
Let me tell you a story about the time I hacked into a .NET API through a bit of luck and reverse engineering.
-
How to extract artifacts from OpenAPI docs to help attack APIs
Learn how to extract artifacts from OpenAPI docs using jq to help you attack APIs
-
Attacking predictable GUIDs when hacking APIs
Learn how to predict and pwn GUIDs used in APIs.
-
Can SBOM help you attack APIs?
Learn how you can leverage the data in a software bill of materials (SBOM) document to find vulnerabilities in API dependencies.
-
Automate your API hacking with Autorize
Learn how to find authorization vulnerabilities in APIs using Burp and Autorize.
-
How to find access control issues in APIs
Learn how to hack APIs by exploiting authorization vulnerabilities.