Hacking APIs is a crash course in web API security testing that will prepare you to penetration-test APIs, reap high rewards on bug bounty programs, and make your own APIs more secure.\
Hacking APIs is a crash course on web API security testing that will prepare you to penetration-test APIs, reap high rewards on bug bounty programs, and make your own APIs more secure.\
Youâll learn how REST and GraphQL APIs work in the wild and set up a streamlined API testing lab with Burp Suite and Postman. Then youâll master tools useful for reconnaissance, endpoint analysis, and fuzzing, such as Kiterunner and OWASP Amass. Next, youâll learn to perform common attacks, like those targeting an APIâs authentication mechanisms and the injection vulnerabilities commonly found in web applications. Youâll also learn techniques for bypassing protections against these attacks.\
In the bookâs nine guided labs, which target intentionally vulnerable APIs, youâll practice:
Enumerating APIs users and endpoints using fuzzing techniques Using Postman to discover an excessive data exposure vulnerability Performing a JSON Web Token attack against an API authentication process Combining multiple API attack techniques to perform a NoSQL injection Attacking a GraphQL API to uncover a broken object level authorization vulnerability
By the end of the book, youâll be prepared to uncover those high-payout API bugs other hackers arenât finding and improve the security of applications on the web.
Categories:
- Computers & Technology
- Programming
- Software Design, Testing & Engineering
- Testing
- Software Design, Testing & Engineering
- Programming
Publisher : No Starch Press
Author : Corey J Ball
Language : English
Edition : Edición Clásica
Published :2022-07-12
Number Of Pages : 368
Binding : paperback
ISBN-10 : 1718502443
ISBN-13 : 9781718502444
Item weight : 1.52 lb
Dimensions : 0.87 in x 7.01 in x 9.13 in
Returns Policy
You may return most new, unopened items within 30 days of delivery for a full refund. We'll also pay the return shipping costs if the return is a result of our error (you received an incorrect or defective item, etc.).
You should expect to receive your refund within four weeks of giving your package to the return shipper, however, in many cases you will receive a refund more quickly. This time period includes the transit time for us to receive your return from the shipper (5 to 10 business days), the time it takes us to process your return once we receive it (3 to 5 business days), and the time it takes your bank to process our refund request (5 to 10 business days).
If you need to return an item, simply login to your account, view the order using the 'Complete Orders' link under the My Account menu and click the Return Item(s) button. We'll notify you via e-mail of your refund once we've received and processed the returned item.
Shipping
We can ship to virtually any address in the world. Note that there are restrictions on some products, and some products cannot be shipped to international destinations.
When you place an order, we will estimate shipping and delivery dates for you based on the availability of your items and the shipping options you choose. Depending on the shipping provider you choose, shipping date estimates may appear on the shipping quotes page.
Please also note that the shipping rates for many items we sell are weight-based. The weight of any such item can be found on its detail page. To reflect the policies of the shipping companies we use, all weights will be rounded up to the next full pound.