• Online, Self-Paced
Course Description

Web based APIs have grown significantly over the last decade. This is in response to enormous growth of mobile apps and rapidly emerging 'Internet of Things'. In the rush to push products to market, developers often take shortcuts on security, leaving online services vulnerable to attack. The risks are not as obvious as they may be in traditional browser based web apps, yet they are extremely susceptible and attackers know how to identify vulnerabilities. This course teaches you how to go on the offense and hack your own APIs before online attackers do.

Learning Objectives

  • Discovering Device Communication With APIs
  • Leaky APIs and Hidden APIs
  • API Manipulation and Parameter Tampering
  • API Authentication and Authorization Vulnerabilities
  • Working With SSL Encrypted API Traffic

    Framework Connections

    The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

    Specialty Areas

    • Exploitation Analysis
    • Software Development
    • Vulnerability Assessment and Management

    Specialty Areas have been removed from the NICE Framework. With the recent release of the new NICE Framework data, updates to courses are underway. Until this course can be updated, this historical information is provided to give better context as to how it can help you with your cybersecurity goals.