Course Overview

Practical API Hacking provides you with everything you need to start hacking APIs. This course was designed for beginners and those familiar with web application hacking but want to expand their skill set.

The course covers industry-standard tools such as Burp Suite and Postman, and how to find and exploit vulnerabilities common to applications powered by APIs. Throughout the course there are demonstration labs to help you understand the theory, and challenges to make sure you get hands-on experience too.

Requirements

  • A machine capable of running Kali Linux.
  • Basic knowledge of how web applications work.

Learning Objectives

  • Understand how APIs work.
  • Understand how to enumerate API endpoints.
  • Understand common vulnerabilities in API-driven applications.
  • Perform successful attacks against vulnerable API endpoints.





APIs

Course Curriculum - 6 Hours

  Welcome to the Course!
Available in days
days after you enroll
  Introduction
Available in days
days after you enroll
  Lab Setup
Available in days
days after you enroll
  Enumerating APIs
Available in days
days after you enroll
  Attacking Authorization
Available in days
days after you enroll
  Attacking Authentication
Available in days
days after you enroll
  Injection
Available in days
days after you enroll
  Mid-course Capstone
Available in days
days after you enroll
  Mass Assignment
Available in days
days after you enroll
  Excessive Data Exposure
Available in days
days after you enroll
  SSRF - Server-side Request Forgery
Available in days
days after you enroll
  Chaining Vulnerabilities
Available in days
days after you enroll
  Final Capstone
Available in days
days after you enroll

This course is included in our
All-Access Membership
starting at $29.99/month

Get full access to the Practical Ethical Hacking course and our full course catalog when you enroll in our All-Access Pass Membership.

About the Instructor

Alex is a Web Application Security specialist with experience working across multiple sectors, from single-developer applications all the way up to enterprise web apps with tens of millions of users. He enjoys building applications almost as much as breaking them and has spent many years supporting the shift-left movement by teaching developers, infrastructure engineers, architects, and anyone who would listen about cybersecurity.

Alex holds a Master's Degree in Computing, as well as CEH and OSCP certifications.

Follow Alexon Social Media:

LinkedIn - https://www.linkedin.com/in/alex-olsen-47119322/

Frequently Asked Questions


Can I get a refund if I'm unhappy with my purchase?

Yes. All purchases come with a 3-day money-back guarantee.


Will I receive a certificate of completion when I finish a course?

Yes. All courses come with a certificate of completion.


Do the courses count as Continuing Education Units (CEUs)?

Yes. Every certificate of completion comes with the total CEUs earned listed on the certificate.

What is the All-Access Pass?

As of July 1st, 2023 TCM Academy transitioned to a monthly subscription model, where you now receive full access to all of the courses on our platform for as long as your subscription remains active.


What if you already own courses on TCM Academy?

If you already own a course on our platform, you will continue to own that course forever. Previously owned courses will not be affected by this change.