Hacking APIs: Breaking Web Application Programming Interfaces

Hacking APIs is a comprehensive guide to web API security testing that will prepare you for bug bounty programs and penetration-testing.

Learn how REST and GraphQL APIs work in real-world scenarios, set up a streamlined testing lab with Burp Suite and Postman, and master tools for reconnaissance and endpoint analysis.

Discover common attacks on API authentication mechanisms and injection vulnerabilities, and learn techniques for bypassing protections against these attacks.

Practice enumerating APIs users and endpoints using fuzzing techniques, performing a JSON Web Token attack, and combining multiple API attack techniques to uncover high-payout bugs.

By the end of this book, you'll be ready to improve the security of applications on the web and uncover vulnerabilities that other hackers miss.