0

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

API Security for White Hat Hackers

You're reading from API Security for White Hat Hackers Uncover offensive defense strategies and get up to speed with secure API implementation

Product type Paperback

Published in Jun 2024

Publisher Packt

ISBN-13 9781800560802

Length 418 pages

Edition 1st Edition

Concepts

Ethical Hacking

Author (1):

Confidence Staveley

View More author details

Table of Contents (20) Chapters

Preface

1. Part 1: Understanding API Security Fundamentals FREE CHAPTER

2. Chapter 1: Introduction to API Architecture and Security

3. Chapter 2: The Evolving API Threat Landscape and Security Considerations

4. Chapter 3: OWASP API Security Top 10 Explained

5. Part 2: Offensive API Hacking

6. Chapter 4: API Attack Strategies and Tactics

7. Chapter 5: Exploiting API Vulnerabilities

8. Chapter 6: Bypassing API Authentication and Authorization Controls

9. Chapter 7: Attacking API Input Validation and Encryption Techniques

10. Part 3: Advanced Techniques for API Security Testing and Exploitation

11. Chapter 8: API Vulnerability Assessment and Penetration Testing

12. Chapter 9: Advanced API Testing: Approaches, Tools, and Frameworks

13. Chapter 10: Using Evasion Techniques

14. Part 4: API Security for Technical Management Professionals

15. Chapter 11: Best Practices for Secure API Design and Implementation

16. Chapter 12: Challenges and Considerations for API Security in Large Enterprises

17. Chapter 13: Implementing Effective API Governance and Risk Management Initiatives

18. Index

Why subscribe?

19. Other Books You May Enjoy

Technical requirements

To illustrate different techniques used by attackers, we’ll introduce two new vulnerable API applications to play with: the Damn Vulnerable Web Services application by Snoopy Security and the Juice Shop application by OWASP. Damn Vulnerable Web Services is a replacement for their first vulnerable application and offers more web- and API-related vulnerabilities to exploit. To install it, refer to their GitHub repository at https://github.com/snoopysecurity/dvws-node. Juice Shop can also be installed by consulting their GitHub repository at https://github.com/juice-shop/juice-shop.

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (1)

Confidence Staveley

Confidence Staveley

Confidence Staveley is a multi-award-winning cybersecurity leader with a background in software engineering, specializing in application security and cybersecurity strategy. Confidence excels in translating cybersecurity concepts into digestible insights for diverse audiences. Her YouTube series, “API Kitchen,” explains API security using culinary metaphors. Confidence holds an advanced diploma in software engineering, a bachelor's degree in IT and business information systems, and a master's degree in IT management from the University of Bradford, as well as numerous industry certifications such as CISSP, CSSLP, and CCISO. In addition to her advisory roles on many boards, Confidence is the founder of CyberSafe Foundation and MerkleFence.

See other products by Confidence Staveley

Personalised recommendations for you

Based on your interests and search pattern

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

The Aspiring CIO and CISO

The Aspiring CIO and CISO

This book helps entry, mid-level, and senior managers master soft skills, craft a compelling brand, and strategically plan their career in C-suite roles with the help of expert insights needed for success in digital leadership and executive roles.

Jun 2024 8h 32m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m

Malware Development for Ethical Hackers

Malware Development for Ethical Hackers

This book will help you understand malware development by delving into the intricate mechanisms of malware development, injection attacks, and advanced evasion strategies with over 80 real-life examples.

Jun 2024 13h 0m