Hands-On Workshop: Introduction to Pentesting for Web Apps / Web APIs

" summary

Walks through practical pentesting for web applications and APIs using Kali Linux in Docker, covering setup of tools (Kali, Docker, Burp Suite proxy referenced as Bob Sweet) and integrating Postman with that proxy. Covers scanning and enumeration techniques, testing for broken object/function-level authorization, JWT manipulation, backend decoupling with DTOs, and recommendations such as using HTTPS and backend authentication.

AI-written summary · about

" related talks

• 15mJumpstart Security & Penetration Testing APIsK. Sundaresan · TestFlix 2022
• 57mEnterprise Ethical Hacking Cloud ApplicationsRohit Bhardwaj · Developer Summit 2020
• 34mBeating the pentesterBoy Baukema · Dutch PHP Conference 2017
• 53mHacking And Defending APIs: Red And Blue Make PurpleMatt Tesauro · Global AppSec Dublin 2023
• 45mOpening Keynote – Tushar KulkarniTushar Kulkarni · APIsecure 2023
• 52mApplication Penetration Testing – DOs and DON‘TsTobias Glemser · JCON-ONLINE 2021
• 58mOpen Source Pentesting and Security Analysis Tools: the DevOps wayChristian Nils Schneider · DevOpsCon Spring 2019
• 01h 01mOpen Source Pentesting and Security Analysis Tools: the DevOps way… #slidelessChristian Nils Schneider · DevOps Conference 2018