К содержимому
learnspaceYOUR NEXT CHAPTER
ПРОСТРАНСТВО ОБУЧЕНИЯ
ГлавнаяКаталог курсовМоё обучениеCoursera

Знания без границ

Учитесь у лучших университетов и компаний мира.

Открыть Coursera
Интеграция
Пространство университета
Моё пространствоСтраница курса
↵
ЯЛичный кабинетСтудент
© 2026 LearnSpaceКаждый день — возможность узнать больше.Помощь
Pentesting APIs · LearnSpace
Назад в каталог
courseraПрограммирование

Pentesting APIs

Курс от Packt
Средний≈ 29.4 чАнглийский
О курсеНавыкиПрограммаПреподаватели

О курсе

This course provides learners with the essential skills to secure APIs against evolving cyber threats. You will master real-world techniques for discovering vulnerabilities, fingerprinting, and exploiting APIs to identify weaknesses and implement effective security measures. API security is critical in today’s digital world, where APIs are core components of modern applications. You will learn how to set up an environment for penetration testing, assess API security, and apply expert techniques to protect APIs from common threats. Practical exercises focus on real-world scenarios, equipping you with the skills to proactively defend APIs against exploitation. The course stands out by combining theory with hands-on practice, offering a comprehensive guide to identifying, testing, and securing APIs. You’ll explore vulnerabilities in both RESTful and GraphQL APIs, gaining expert insights into real-world cybersecurity challenges. This course is ideal for security engineers, developers, and analysts with a basic understanding of web development and cybersecurity. It’s designed for those looking to enhance their skills in API security and protection.

Навыки, которые вы освоите

Secure CodingAuthenticationsDistributed Denial-Of-Service (DDoS) AttacksDevelopment EnvironmentAPI TestingApplication Programming Interface (API)CybersecurityScenario TestingRestful APIBusiness LogicAuthorization (Computing)Security ControlsData SecurityVulnerability ScanningApplication SecurityExploitation techniquesPenetration TestingVulnerability AssessmentsSecurity TestingPersonally Identifiable Information

Программа курса

10 модулей · 85 учебных материалов

01Understanding APIs and Their Security Landscape9 материалов

Lesson 1

Course OverviewВидеоUnderstanding APIs and Their Security Landscape - Overview VideoВидеоIntroductionЧтениеA Brief History of APIsЧтение

Учитесь у экспертов

Packt - Course Instructors

Преподаватель курса

Pentesting APIs
В каталоге вашей программы

Инвестируйте в себя

Новые знания — в удобное для вас время.

Начать на Coursera

Обучение откроется на Coursera
в новой вкладке

Обучение на Coursera

≈ 29.4 ч

10 модулей

Язык: Английский

Часть программы вашего университета
API Types and ProtocolsЧтение
RESTЧтение
gRPCЧтение
GraphQLЧтение
API Security and Communication FundamentalsЗадание
02Setting Up the Penetration Testing Environment7 материалов

Lesson 1

Setting Up the Penetration Testing Environment - Overview VideoВидеоIntroductionЧтениеInstalling DockerЧтениеBuilding a Practical API Penetration Testing LabЗаданиеInstalling Burp SuiteЧтениеHydraЧтениеPenetration Testing Environment SetupЗадание
03API Reconnaissance and Information Gathering8 материалов

Lesson 1

API Reconnaissance and Information Gathering - Overview VideoВидеоIntroductionЧтениеLooking at crAPIЧтениеAPI Reconnaissance, Enumeration, and Information ExposureЗаданиеAnalyzing API Documentation and EndpointsЧтениеLeveraging OSINTЧтениеIdentifying Data and Schema StructuresЧтениеAPI Security and Information Gathering FundamentalsЗадание
04Authentication and Authorization Testing12 материалов

Lesson 1

Authentication and Authorization Testing - Overview VideoВидеоIntroductionЧтениеBasic AuthenticationЧтениеSession TokensЧтениеJSON Web Tokens (JWTs)ЧтениеPractice: Create a Prioritized API Security Testing PlanDIALOGUETesting for Weak Credentials and Default AccountsЧтениеCommon Credentials and Default AccountsЧтениеExploring Authorization MechanismsЧтениеAttribute-based Access ControlЧтениеBypassing Access ControlsЧтениеAuthentication and Authorization FundamentalsЗадание
05Injection Attacks and Validation Testing11 материалов

Lesson 1

Injection Attacks and Validation Testing - Overview VideoВидеоIntroductionЧтениеTesting for SQL InjectionЧтениеHidden Union SQL InjectionЧтениеExploiting SQL Injection on a Vulnerable APIЧтениеPractice: Design an Anti-Injection StrategyDIALOGUETesting for NoSQL InjectionЧтениеOperator InjectionЧтениеValidating and Sanitizing User InputЧтениеSanitizing Query ParametersЧтениеInjection Attacks and Input ValidationЗадание
06Error Handling and Exception Testing5 материалов

Lesson 1

Error Handling and Exception Testing - Overview VideoВидеоIntroductionЧтениеFuzzing for Exception Handling VulnerabilitiesЧтениеLeveraging Error Responses for Information DisclosureЧтениеError Handling and Exception Testing in APIsЗадание
07Denial of Service and Rate-Limiting Testing10 материалов

Lesson 1

Denial of Service and Rate-Limiting Testing - Overview VideoВидеоIntroductionЧтениеInteracting with Mockoon’s EndpointsЧтениеLeveraging Scapy to Attack MockoonЧтениеSending Fragmented Packets with hping3ЧтениеPractice: Evaluate Rate-Limiting Blind SpotsDIALOGUEIdentifying Rate-Limiting MechanismsЧтениеLeaky BucketsЧтениеCircumventing Rate LimitationsЧтениеAPI Security and Traffic ControlЗадание
08Data Exposure and Sensitive Information Leakage8 материалов

Lesson 1

Data Exposure and Sensitive Information Leakage - Overview VideoВидеоIntroductionЧтениеElasticsearch and MoreЧтениеRipgrepЧтениеPractice: Design a Data Leak Triage StrategyDIALOGUETesting for Information LeakageЧтениеPreventing Data LeakageЧтениеSecuring Data in API EnvironmentsЗадание
09API Abuse and Business Logic Testing10 материалов

Lesson 1

API Abuse and Business Logic Testing - Overview VideoВидеоIntroductionЧтениеExploring API Abuse ScenariosЧтениеSetting Up OpenBullet2ЧтениеCreating a Configuration and AttackingЧтениеOther Features and Security RecommendationsЧтениеPractice: Analyze API Business Logic in ContextDIALOGUEParameter TamperingЧтениеTesting for Business Logic VulnerabilitiesЧтениеExploring API Security and Business Logic RisksЗадание
10Secure Coding Practices for APIs5 материалов

Lesson 1

Secure Coding Practices for APIs - Overview VideoВидеоIntroductionЧтениеImplementing Secure Authentication MechanismsЧтениеImplementing Proper Error Handling and Exception ManagementЧтениеSecure Coding for API ProtectionЗадание