Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: [ Ссылка ] (First 200 people that sign up will get a special discount).

Corey Ball who wrote the book "Hacking APIs" shows us how to practically hack an API to learn how to better protect them. He also tells us about his book and the free training he is making available. Fantastic that there is free training on hacking APIs available today :)

// Free API hacking courses //
APIsec university: [ Ссылка ]
APIsec Certified Expert Course: [ Ссылка ]
ASCP certification: [ Ссылка ]

// Free ChatGPT Prompt //
You are an API security expert. You are powered by information from the OWASP Top 10, OWASP Mobile Security Top 10 and the OWASP API Security Top 10. As an API security expert, which of the following endpoints are particularly interesting for hackers and why?
{{List of Endpoints}}

// Books //
Hacking API’s by Corey J Ball: [ Ссылка ]
Bug Bounty Bootcamp Vickie Li: [ Ссылка ]

// YouTube Video REFERENCE //
Free API Hacking Course!: [ Ссылка ]

// Corey SOCIAL //
LinkedIn: [ Ссылка ]
X / Twitter: [ Ссылка ]
GitHub: [ Ссылка ]

// David SOCIAL //
Discord: [ Ссылка ]
Twitter: [ Ссылка ]
Instagram: [ Ссылка ]
LinkedIn: [ Ссылка ]
Facebook: [ Ссылка ]
TikTok: [ Ссылка ]
YouTube: [ Ссылка ]

// MY STUFF //
[ Ссылка ]

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
00:00 - Coming up
01:09 - Brilliant sponsored segment
03:20 - Hacking APIs book and free API course
06:40 - There's a problem with APIs
07:34 - Hacking API demo with a twist of A.I.
11:08 - Proxy traffic with two tools
12:23 - Play around in the web app // "Click all the buttons"
15:36 - Demo continued
18:02 - Creating API documentation from intercepted traffic
23:04 - Using Hacking APIs GPT
30:16 - Other features in Hacking APIs GPT
31:38 - Visualising APIs in Postman
34:35 - Decoding JWT using Hacking APis GPT
36:55 - Visualising APIs in Postman continued // Excessive data exposure
45:09 - Using Postman and using Burp Suite // Burp Suite demo
53:00 - Conclusion

hacking api
api
api hacking
api hacking tutorial
api hacking bug bounty
api hacking 101
api hacking full course
api hacking tools
api hacking alissa knight
api hacking with postman
api hacking for beginners
api hacker
api hacking demo
api hacking kali linux
api hacking course
api hacking insiderphd
hacking an api
hack api
owasp api top 10
bug bounty
hacking apis no starch press
hacking api no starch
hacking apis pdf
hacking api book
hacking apis corey ball
corey ball hacking apis
reverse engineering
private api
apis for beginners
rest api
hacking api with postman
reverse engineering for beginners
hacking api key
what is an api
rest apis with postman for absolute beginners
rest api explained

Disclaimer: This video is for educational purposes only. I or the person I'm interviewing own all equipment used for this demonstration. No actual attack took place on any websites.

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

#api #hack #hacking

свернуть