#456: Free Hacking API courses (And how to use AI to help you hack)

Feb 27, 2024

Corey Ball, author of 'Hacking APIs,' discusses free API hacking courses and certifications, emphasizing API security. He explores exploiting API endpoints, live interactions, and testing for vulnerabilities. The podcast highlights the risks of data exposure and the importance of proper security measures in APIs.

Ask episode

Chapters

Transcript

Episode notes

Introduction

00:00 • 5min

Exploring Free Hacking API Courses and Certification with Emphasis on API Security

04:50 • 3min

Exploring and Exploiting API Endpoints

07:34 • 30min

Exploring Live API Interactions and Security Vulnerabilities

38:04 • 7min

Exploring API Testing and Vulnerabilities

44:51 • 7min

Exploring API Security Vulnerabilities and Community Contribution

51:56 • 2min

Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://Brilliant.org/davidbombal (First 200 people that sign up will get a special discount). Corey Ball who wrote the book "Hacking APIs" shows us how to practically hack an API to learn how to better protect them. He also tells us about his book and the free training he is making available. Fantastic that there is free training on hacking APIs available today :) // Free API hacking courses // APIsec university: https://www.apisecuniversity.com/ APIsec Certified Expert Course: https://university.apisec.ai/ ASCP certification: https://www.apisecuniversity.com/cour... // Free ChatGPT Prompt // You are an API security expert. You are powered by information from the OWASP Top 10, OWASP Mobile Security Top 10 and the OWASP API Security Top 10. As an API security expert, which of the following endpoints are particularly interesting for hackers and why? {{List of Endpoints}} // Books // Hacking API’s by Corey J Ball: https://amzn.to/3JOJG0E Bug Bounty Bootcamp Vickie Li: https://amzn.to/3SPCtBF // YouTube Video REFERENCE // Free API Hacking Course!: • Free API Hacking course! // Corey SOCIAL // LinkedIn: / coreyjball X / Twitter: / hapi_hacker GitHub: https://github.com/hAPI-hacker/Hackin... // David SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Disclaimer: This video is for educational purposes only. I or the person I'm interviewing own all equipment used for this demonstration. No actual attack took place on any websites. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #api #hack #hacking