This CTF Teaches You Everything About Hacking an API

This video tutorial provides a comprehensive guide to API hacking through a Capture The Flag (CTF) exercise. Learn essential API security concepts including authentication vulnerabilities, UUID leakage, information disclosure techniques, API versioning exploits, privilege escalation methods, bypassing restrictions using different HTTP methods, and automating the reconnaissance process. The 19-minute tutorial by NahamSec (Ben), a renowned hacker and bug bounty hunter, breaks down complex API security concepts into practical demonstrations. The content progresses from basic authentication issues to advanced automation techniques, making it suitable for both beginners and experienced security professionals looking to enhance their API hacking skills. Sponsored by APISEC, the tutorial includes timestamps for easy navigation through different security concepts and concludes with a practical demonstration of combining multiple techniques.