Web APIs Penetration Testing

Introduction

• Introduction to Web APIs
• Lab Setup

Enumeratin APIs

• Fuzzing APIs
• Discovery Via Source Code

Attacking Authorization

• Introduction to Authorization
• Broken Object Level Authorization Lab 1
• Broken Object Level Authorization Lab 2