Mastering Api Security For Pentesting & Bug Bounties 2025

Mastering Api Security For Pentesting & Bug Bounties 2025
Published 3/2025
MP4 | Video: h264, 1920×1080 | Audio: AAC, 44.1 KHz

Hands-On Attacks, Defense, and Real-World Case Studies

What you’ll learn

OWASP API Security Top 10 vulnerabilities

Authentication & Authorization Best Practices

API Security Testing & Hacking

Real-World API Security Case Studies

Requirements

Willingness to Learn & Practice

Fundamentals of Web Security is an added advantage

No programming

Laptop with a good internet connection

Description

Overview

Section 1: Introduction

Lecture 1 Introduction

Section 2: Introduction to API Security

Lecture 2 Introduction to API Security

Lecture 3 Why API’s are important – API Attack Surface

Section 3: Understanding API’s for Bug Bounties

Lecture 4 Bug Bounty Targets for API

Lecture 5 How to find Hackerone API Reports & Purpose of API’s?

Section 4: Deep Dive in API’s

Lecture 6 What are the types of API?

Lecture 7 Understanding REST APIs

Lecture 8 Understanding SOAP APIs

Lecture 9 Understanding GraphQL APIs

Lecture 10 Use Cases of API

Section 5: Lab Setup using vAPI

Lecture 11 Lab Setup in Docker

Lecture 12 Understanding OpenAPI Specifications

Lecture 13 Introduction to Swagger UI

Lecture 14 Breakdown of Swagger UI Components

Lecture 15 Configuring Swagger UI to send requests

Section 6: OWASP Top 10 Practical Test Cases

Lecture 18 Postman Fundamentals

Lecture 19 Postman Lab & Workspace Setup

Lecture 20 Understanding Collections in Postman

Lecture 21 Understanding Environments in Postman

Lecture 22 Excessive Data Exposure

Lecture 23 Mass Assigment Vulnerability

Lecture 24 Security Misconfiguration

Lecture 25 Understanding Fuzzer

Lecture 26 Improper Assets Management

Lecture 27 No Logging & Monitoring

Lecture 28 Parsing API Json Output to Grep Info

Lecture 29 Using AI for API Pentesting

Section 7: Whats Next?

Lecture 30 Conclusion and whats next?

Cybersecurity Enthusiasts,Developers & DevSecOps Engineers,Penetration Testers & Bug Bounty Hunters,IT Security Professionals & SOC Analysts