API Security Testing Masterclass

Comprehensive training designed for professionals

(0 reviews)

Course Overview

Explore the course outline and contact our advisors about prerequisites, practical work, and current availability.

For the current syllabus, prerequisites, fees, and batch availability, contact our training advisors.

Meet Your Instructor: Omar Siddiqui

Penetration testing specialist with hands-on expertise in web, mobile and API security assessments for enterprise clients.

Course Lectures

Course Content

1 API Fundamentals & Attack Surface
2 REST API Security Testing
3 GraphQL Security Testing
4 Authentication & Authorization Flaws
5 Business Logic & Rate Limit Abuse
6 API Fuzzing & Automation
7 OWASP API Top 10 Deep Dive
8 API Security Assessment Report

API Fundamentals & Attack Surface

2 hours

Lecture 1 of 8

REST, GraphQL, and gRPC: how APIs work and where they break.

REST API Security Testing

2 hours

Lecture 2 of 8

Methodical REST testing: endpoints, parameters, and mass assignment.

GraphQL Security Testing

2 hours

Lecture 3 of 8

Introspection abuse, query depth attacks, and authorization flaws in GraphQL.

Authentication & Authorization Flaws

3 hours

Lecture 4 of 8

JWT attacks, OAuth misconfigurations, and broken object-level authorization.

Business Logic & Rate Limit Abuse

2 hours

Lecture 5 of 8

Finding logic flaws, race conditions, and enumeration via APIs.

API Fuzzing & Automation

2 hours

Lecture 6 of 8

Automated API discovery and fuzzing with custom wordlists and scripts.

OWASP API Top 10 Deep Dive

3 hours

Lecture 7 of 8

Hands-on labs for each of the OWASP API Security Top 10 risks.

API Security Assessment Report

2 hours

Lecture 8 of 8

Deliver a complete API security assessment with prioritized findings.

Request Course Syllabus Corporate Services Enroll Now Get Discount

Eligibility Criteria

Basic web security knowledge. Familiarity with HTTP and JSON helpful.

Recommended Training Programs

Handpicked programs tailored to boost your cybersecurity expertise

Recommended

Threat Hunting & Detection Engineering

Explore the course outline and contact our advisors about prerequisites, practical work, and current availability.

0.0

Recommended

GRC & Compliance Professional

Explore the course outline and contact our advisors about prerequisites, practical work, and current availability.

0.0

Recommended

AI & Data Science

Deep Learning with TensorFlow & Keras

Build and evaluate neural-network models using TensorFlow and Keras for practical machine-learning problems.

0.0

Frequently Asked Questions

For admissions, course selection, and schedule questions, visit our training FAQs or contact an advisor.

Cyber Legends

Start with a topic

API Security Testing Masterclass