Professionally Evil API Testing: AAA and Keys are Not Just for Cars with Jennifer Shannon

This course will teach you how to test web APIs for authorization and access control related security flaws. You will learn how to map API functionality, identify authentication and authorization flaws, and exploit common API vulnerabilities.

You will also gain hands-on experience with tools and techniques for testing API authorization mechanisms and access control models. By the end of this course, you will be able to:

• Perform API reconnaissance and endpoint analysis
• Scan APIs for security misconfigurations and excessive data exposure
• Attack API authentication schemes
• Test API authorization mechanisms for vulnerabilities like insecure direct object references and privilege escalation
• Test APIs for rate limiting and business logic flaws
• Combine tools and techniques to exploit API weaknesses

Check out our other Secure Ideas courses here.