Power BI Fundamentals - Create visualizations and dashboards from scratch
Get 20% off all career paths from fullstack to AI
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
This video tutorial provides a comprehensive guide to API hacking through a Capture The Flag (CTF) exercise. Learn essential API security concepts including authentication vulnerabilities, UUID leakage, information disclosure techniques, API versioning exploits, privilege escalation methods, bypassing restrictions using different HTTP methods, and automating the reconnaissance process. The 19-minute tutorial by NahamSec (Ben), a renowned hacker and bug bounty hunter, breaks down complex API security concepts into practical demonstrations. The content progresses from basic authentication issues to advanced automation techniques, making it suitable for both beginners and experienced security professionals looking to enhance their API hacking skills. Sponsored by APISEC, the tutorial includes timestamps for easy navigation through different security concepts and concludes with a practical demonstration of combining multiple techniques.
Syllabus
0:00 - Intro
2:00 - Authentication
3:10 - Leaking UUID
5:09 - Information Disclosure & Automation
8:00 - API Versioning
10:00 - Privilege Escalation
11:34 - GET vs PUT to bypass restrictions
13:05 - Automating Recon Process for API Hacking
17:15 - Putting it all together
Taught by
NahamSec