Attack of the Clones! How AI can boost your API Security!
summary
Shows concrete results: ChatGPT instance hacking apis GPT generates fuzz payload lists, and given a curl to an httpbin endpoint it pinpoints parameters to fuzz and maps likely OAS Top 10 issues. Feeding a Postman collection produces per-endpoint attack suggestions; a JWT check missed a deliberately long expiry. Demonstrates Postman Postbot auto-generating OAS-flavored regression tests that detect BOLA/IDOR (three failing cases found, one pass), notes ChatGPT subscription and enterprise non-training option.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:29APIs as prime targets
- 2:35Deadliest API attacks
- 4:24AI for attack surface discovery
- 8:40Demo: Fuzzing API parameters
- 11:37Demo: Analyzing endpoints
- 12:18Demo: JWT vulnerability check
- 13:42AI for API defenders
- 15:47Demo: BOLA test cases
- 17:33Summary and Q&A
related talks
18mAPIs with ChatGPT 4-Turbo and Attack Path Visualization
25mHack-Proof Your API: Exclusive Attack Simulator Deep Dive 🛡️
18mDefending the unknown using AI and cybersecurity
25mPreventing an OWASP Top 10 in the world of AI
23mAI-Driven API Security: Expert Strategies Unveiled
54mA Practical Guide to AI Threats & Mitigation Strategies
01h 14mBreaking the Bot: GenAI Web App Attack Surface & Exploitation
27mChatGPT Ignites