Part 3: API Basic Attacks

Now that you have been introduced to basic attacks in Part 2, it’s time to move on and increase your knowledge of more types of attacks. In this part, you will learn about techniques that you must not ignore while targeting APIs. We will discuss adapted SQL and NoSQL injection attacks, the problems caused by bad user input sanitization, what happens when an error is not correctly handled, and finally, the feared denial-of-service attack. You will also be presented with some ways to block or at least reduce the chances of such attacks being successful.

This section contains the following chapters:

• Chapter 5, Injection Attacks and Validation Testing
• Chapter 6, Error Handling and Exception Testing
• Chapter 7, Denial of Service and Rate-Limiting Testing