You're reading from API Security for White Hat Hackers Uncover offensive defense strategies and get up to speed with secure API implementation

Product type Paperback

Published in Jun 2024

Publisher Packt

ISBN-13 9781800560802

Length 418 pages

Edition 1st Edition

Concepts

Ethical Hacking

Author (1):

Confidence Staveley

View More author details

Table of Contents (20) Chapters

Preface

1. Part 1: Understanding API Security Fundamentals FREE CHAPTER

2. Chapter 1: Introduction to API Architecture and Security

3. Chapter 2: The Evolving API Threat Landscape and Security Considerations

4. Chapter 3: OWASP API Security Top 10 Explained

5. Part 2: Offensive API Hacking

6. Chapter 4: API Attack Strategies and Tactics

7. Chapter 5: Exploiting API Vulnerabilities

8. Chapter 6: Bypassing API Authentication and Authorization Controls

9. Chapter 7: Attacking API Input Validation and Encryption Techniques

10. Part 3: Advanced Techniques for API Security Testing and Exploitation

11. Chapter 8: API Vulnerability Assessment and Penetration Testing

12. Chapter 9: Advanced API Testing: Approaches, Tools, and Frameworks

13. Chapter 10: Using Evasion Techniques

14. Part 4: API Security for Technical Management Professionals

15. Chapter 11: Best Practices for Secure API Design and Implementation

16. Chapter 12: Challenges and Considerations for API Security in Large Enterprises

17. Chapter 13: Implementing Effective API Governance and Risk Management Initiatives

18. Index

Why subscribe?

19. Other Books You May Enjoy

To get the most out of this book

To fully benefit from this book, it helps to have a basic understanding of certain technical concepts and familiarity with various technologies. These include HTTP and HTTPS protocols, REST and SOAP APIs, JSON and XML data formats, OAuth and API keys, network security fundamentals, common vulnerabilities, programming basics (especially in languages such as Python, JavaScript, or Java), and version control systems such as Git. Additionally, experience with specific tools will greatly enhance your ability to grasp the material and apply the techniques discussed effectively. Here are the key tools you should know, many of which come pre-installed in Kali Linux.

Software/hardware covered in the book	Operating system requirements
Postman	Windows, macOS, or Linux
Burp Suite	Windows, macOS, or Linux
Applitools	Windows, macOS, or Linux
Web browser (chrome/firefox)	Windows, macOS, or Linux
Gatling	Windows, macOS, or Linux
American Fuzzy Lop (AFL)	Windows, macOS, or Linux
Arjun	Linux
Amass	Linux
Metasploit	Windows, macOS, or Linux
Kiterunner	Linux
Faster You Fool (FFUF)	Linux
FoxyProxy	Linux
Steghide	Linux
Elasticsearch	Windows, macOS, or Linux
Kibana	Windows, macOS, or Linux
Elastic SIEM	Windows, macOS, or Linux
OWASP ZAP	Windows, macOS, or Linux
Nessus	Windows, macOS, or Linux
ModSecurity	Linux
Splunk	Windows, macOS, or Linux

Specific requirements and tools are detailed in the Technical requirements section of each chapter. This ensures you have the necessary tools and knowledge to meet the expectations of each chapter.

If you are using the digital version of this book, we advise you to type the code yourself or access the code from the book’s GitHub repository (a link is available in the next section). Doing so will help you avoid any potential errors related to the copying and pasting of code.