Category: API Hacking Tools
-
A Step-by-Step Guide to Writing Extensions for API Pentesting in BurpSuite
Write your own extensions in Python to pwn your API targets with BurpSuite
-
Defeating a dockerized API to get access to source code
Learn how to extract API artifacts from a docker image and decompile them to source code to find vulnerabilities using taint analysis.
-
7 Essential Burp Extensions for Hacking APIs
Check out the coolest extensions to help out when hacking APIs in Burp.
-
Attacking Microsoft Graph with Postman
Learn how to use Postman to attack the Microsoft Graph API.
-
The API Hacker’s Guide to Payload Injection with Postman
Learn how to use Postman to attack APIs with payload injection.
-
How to craft rogue API docs for a target when they don’t exist
Learn how to reverse engineer an undocumented API using your own rogue docs.
-
Exploit APIs with cURL
Learn how to use cURL in your exploits and demonstrate impact to the API vulnerabilities you find.