Thanks to Brilliant for sponsoring this video! Start with a free 30-day trial and 20% off: https://Brilliant.org/davidbombal (The first 200 people to sign up will receive a special discount).

Corey Ball, the author of the book "Hacking APIs", shows us how to practically hack an API to learn how to better protect it. He also tells us about his book and the free training he offers. Fantastic that there are free training courses on hacking APIs today 🙂

// Free API Hacking Courses //
APIsec University: https://www.apisecuniversity.com/
APIsec certified expert course: https://university.apisec.ai/
ASCP Certification: https://www.apisecuniversity.com/courses/api-security-certified-professional-exam

// Free ChatGPT Prompt //
You are an API security expert. You use information from the OWASP Top 10, OWASP Mobile Security Top 10 and OWASP API Security Top 10. As an API security expert, which of the following endpoints are of particular interest to hackers and why?
{{List of endpoints}}

// Books //
Hacking API's by Corey J Ball: https://amzn.to/3JOJG0E
Bug Bounty Bootcamp Vickie Li: https://amzn.to/3SPCtBF

// YouTube Video REFERENCE //
Free API Hacking Course!: https://youtu.be/CkVvB5woQRM

// Corey SOCIAL //
LinkedIn: https://www.linkedin.com/in/coreyjball/
X / Twitter: https://twitter.com/hAPI_hacker
GitHub: https://github.com/hAPI-hacker/Hacking-APIs

// David SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Want to sponsor my videos? Contact my team here: [email protected]

// MENU //
00:00 – Coming soon
01:09 – Brilliant sponsored segment
03:20 – Book on hacking APIs and free API course
06:40 – There is a problem with APIs
07:34 – Hacking API demo with a touch of AI
11:08 – Proxy traffic with two tools
12:23 – Play around in the web app // /"Click all the buttons/"
15:36 – Continuation of the demo
18:02 – Creating API documentation from intercepted traffic
23:04 – Using Hacking APIs GPT
30:16 – More features in Hacking APIs GPT
31:38 – Visualizing APIs in Postman
34:35 – Decoding JWT using hacking APIs GPT
36:55 – Visualizing APIs in Postman, continued // Excessive data load
45:09 – Using Postman and Burp Suite // Burp Suite Demo
53:00 – Conclusion

API hack
API
API hacking
API Hacking Tutorial
API Hacking Bug Bounty
API Hacking 101
Complete API Hacking Course
API Hacking Tools
API Hacking, Alissa Knight
API hacking with Postman
API Hacking for Beginners
API Hacker
API Hacking Demo
API Hacking Kali Linux
API Hacking Course
API Hacking Insiderphd
hack an API
API hack
OWASP APIs Top 10
Error bonus
Hacking APIs, not starch presses
API hacking without strength
Hacking APIs, pdf
Book on hacking APIs
Hacking APIs, Corey Ball
Corey Ball hacks APIs
Backward development
privateAPI
APIs for beginners
Rest API
Hacking API with Postman
Reverse engineering for beginners
Hack API key
What is an API?
Rest APIs with Postman for absolute beginners
Rest API explained

Disclaimer: This video is for educational purposes only. All equipment used for this demonstration belongs to me or the person I am interviewing. No actual attack on any websites took place.

Please note that the links listed may be affiliate links and will earn me a small percentage/commission if you use them to purchase the items listed or recommended. Thank you for your support of me and this channel!

#API #Hack #Hacking

Please take the opportunity to connect with your friends and family and share this video with them if you find it useful.