API Security for White Hat Hackers

5

Exploiting API Vulnerabilities

While starting the API exploitation phase, it is important to know which vulnerabilities you should expect or anticipate and how to exploit those vulnerabilities without affecting your client’s infrastructure. We covered the benefits APIs bring to organizations and consumers alike previously. In this chapter, we’ll delve into how the vulnerabilities in these essential components can be exploited by attackers, and how you, as an ethical penetration tester, can leverage them to protect your organization.

In this chapter, we’re going to cover the following topics:

• API attack vectors
• Fuzzing and injection attacks on APIs
• Exploiting authentication and authorization vulnerabilities in APIs

Let’s get started!

Technical ...