|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/breaking-apis-an-offensive-api-pentesting-course/
课程评论：没有评论
课程名称：打破API：进攻性API渗透测试课程 课程概述：API是现代应用程序的支柱，允许服务之间无缝交互。然而，API日益增加的存在使其成为攻击者的主要目标。“打破API：进攻性API渗透测试课程”旨在培养您所需的进攻性API渗透测试技能，以在恶意行为者之前发现和利用安全漏洞。本课程从API架构和HTTP协议的基础知识开始，接着提供API枚举和测试的实用技术。您将探索Postman和Burp Suite等基本工具，学习如何映射API并发现潜在的弱点。 随着课程的深入，您将学习常见的API安全漏洞，例如破损的身份验证、破损的授权和配置错误。课程内容与OWASP API安全十大漏洞对齐，涵盖现实世界的漏洞，如破损对象级别授权（BOLA）、过度数据暴露、大量赋值、注入攻击和不当资产管理。每个模块都旨在提供实际的动手经验，使您能够发现和利用这些漏洞，通过详细的实验和挑战来巩固您的技能。 无论您是渗透测试人员、安全分析师还是开发人员，“打破API：进攻性API渗透测试课程”都会为您提供在当今威胁环境中保护API所需的技能和知识。通过完成本课程，您将能够进行全面的API渗透测试，识别安全风险，并保护敏感数据免受新兴威胁。
APIs are the backbone of modern applications, enabling seamless interactions between services. However, their increasing presence makes them a prime target for attackers. "Breaking APIs: An Offensive API Pentesting Course" is designed to equip you with the offensive API pentesting skills necessary to find and exploit security flaws before malicious actors do.This course begins with the fundamentals of API architecture and HTTP protocols, followed by hands-on techniques for API enumeration and testing. You will explore essential tools like Postman and Burp Suite, learning how to map APIs and uncover potential weaknesses. Progressing into more advanced concepts, you will dive into common API security vulnerabilities, such as broken authentication, broken authorization, and misconfigurations.The course aligns with the OWASP API Security Top 10, tackling real-world vulnerabilities like Broken Object Level Authorization (BOLA), excessive data exposure, mass assignment, injection attacks, and improper asset management. Each module is designed to give you practical, hands-on experience in finding and exploiting these vulnerabilities, reinforcing your skills through detailed labs and challenges.Whether you're a penetration tester, security analyst, or developer, "Breaking APIs: An Offensive API Pentesting Course" will arm you with the skills and knowledge to secure APIs in today's threat landscape. By the end of this course, you will be prepared to conduct thorough API pentests, identify security risks, and protect sensitive data from emerging threats.
