You want to ride waves. You want to learn the hot new topics to get ahead - especially if you are starting out. Don't focus on the stuff of yesterday. Focus on the new opportunities. Ben Sadeghipour (NahamSec) shares his suggestions about what to learn and then tells us about one that is gaining a lot of momentum in 2022.

// MENU //
00:00 - Coming Up
00:29 - Intro
00:34 - The next big thing
02:09 - Opportunities in Web3
03:59 - Ride the wave
06:07 - Attack Vector & Attack Surface Management
11:39 - Going digital and digital assets
14:14 - NahamSec "Under 10 Minutes" series
15:51 - Patches that are still vulnerable
18:20 - APIs are the future
21:16 - Shodan demo
30:24 - The security issue
31:38 - Shodan vs ASM
32:38 - Out of scope assets
35:12 - NahamSec and Hadrian
38:12 - Will automation take over?
39:13 - ASM vs Inventory Management
40:49 - Getting more information about ASM
44:21 - Covering APIs on NahamSec YouTube
45:31 - Conclusion

Previous video: https://youtu.be/9vaEwycet90

// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal 

// Connect with NahamSec //
Twitter: https://twitter.com/nahamsec
YouTube: https://www.youtube.com/c/nahamsec
Github: https://github.com/nahamsec/Resources...
Discord: https://discord.com/invite/ysndAm8
Instagram: https://www.instagram.com/nahamsec/
LinkedIn: https://www.linkedin.com/in/nahamsec/
Twitch: https://www.twitch.tv/nahamsec
Website: https://nahamsec.com/

// Nahamsec's Udemy Course// 
Udemy: https://www.udemy.com/course/intro-to...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

hack
hacker
shodan
cyber
hacking
cybersecurity
asm
rsa
attack surface management
attack vector
attack surface monitoring
attack surface reduction
bitcoin
api
apis
postman
hacking
hacking api
cyber security
information security
sans institute
cybersecurity training
cyber security training
information security training
privacy
nsa
oscp
ceh
bug bounty
bugbounty
hackerone
hacking
Ben Sadeghipour
NahamSec
nahamsec 
cyber
security
bug bounties
ethical hacking
bug bounty hunting
burp suite
ethical hacker

Disclaimer: This video is for educational purposes only. 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

#cyber #hacking #jobs

#395: What you need to learn in 2022? Top 3 hot trends.

I interview Corey Ball who wrote the book "Hacking APIs" and he tells us about his book and the free training he is making available. This is a cool announcement :)

// MENU //
00:00 - Why talk about pentesting at all?
00:21 - Welcome//Corey
00:48 - What is an API and Why Care?
01:52 - Free API Hacking Course!
02:11 - Overview//Course
02:28 - Do I Need the Book to do the Course?
02:39 - Pre-reqs for Course
03:07 - Cert//When?
03:22 - Hacking APIs//Origin Story
05:34 - The Start//USPS Data Leak
07:31 - OWASP Top 10 Explained
07:49 - API1//Broken Object Level Authorization
08:46 - Testing for BOLA
09:59 - API2//Broken User Authentication
10:35 - Leaked API Keys on GitHub?
10:59 -  API3//Excessive Data Exposure
12:05 -  API9//Improper Asset Management
13:53 - The World is Running on APIs
14:53 - Who is this Book For?
16:19 - Set Up Hacking Lab
17:47 - You Just Need a Laptop to Start Hacking!
17:52 - Free API Hacking Tools
20:14 - What is Kiterunner
20:47 - Gobuster vs Kiterunner 
21:51 - Free Wordlists!
22:05 - What is fuzzing and free fuzzing tool
23:17 - More Tools?
23:47 - How To Find APIs
25:02 - Using nmap to find APIs?
26:09 - Hacking APIs as your start in hacking
28:09 - Difference//REST//GraphQL
29:07 - Learn REST or GraphQL?
31:07 - Take a University Course?
31:44 - Hacking Certifications//Worth It?
33:42 - Being Hacked//How Corey Started 
36:31 - Corey's OSCP Experience
38:09 - Hacking APIs As An Alternative Path
38:41 - Resources to Start With 
39:26 - Ten Years of Experience?
39:52 - Huge Demand for Hacking APIs
40:25 - The Course is Completely Free
40:47- Breaking Barriers!
41:37 - Thank You & Final Words

// Free API hacking course //
APIsec Certified Expert Course: https://university.apisec.ai/

// Defcon Workshop notes //
https://sway.office.com/HVrL2AXUlWGNDHqy

// Books //
Hacking API’s by Corey J Ball: https://amzn.to/3JOJG0E 
Bug Bounty Bootcamp Vickie Li: https://amzn.to/3SPCtBF

// YouTube channels mentioned //
InsiderPHD: https://www.youtube.com/c/InsiderPhD
IppSec: https://www.youtube.com/c/ippsec/videos

// Corey SOCIAL //
LinkedIn: https://www.linkedin.com/in/coreyjball/
Twitter: https://twitter.com/hAPI_hacker

// David SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal 

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

hacking api
api
api hacking
api hacking tutorial
api hacking bug bounty
api hacking 101
api hacking full course
api hacking tools
api hacking alissa knight
api hacking with postman
api hacking for beginners
api hacker
api hacking demo
api hacking kali linux
api hacking course
api hacking insiderphd
hacking an api
hack api
owasp api top 10
bug bounty
hacking apis no starch press
hacking api no starch
hacking apis pdf
hacking api book
hacking apis corey ball
corey ball hacking apis
reverse engineering
private api
apis for beginners
rest api
hacking api with postman
reverse engineering for beginners
hacking api key
what is an api
rest apis with postman for absolute beginners
rest api explained

#api #hack #hacking

#399: Free API Hacking course!

Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://Brilliant.org/davidbombal (First 200 people that sign up will get a special discount).

Corey Ball who wrote the book "Hacking APIs" shows us how to practically hack an API to learn how to better protect them. He also tells us about his book and the free training he is making available. Fantastic that there is free training on hacking APIs available today :)

// Free API hacking courses //
APIsec university: https://www.apisecuniversity.com/
APIsec Certified Expert Course: https://university.apisec.ai/
ASCP certification:  https://www.apisecuniversity.com/cour...

// Free ChatGPT Prompt //
You are an API security expert. You are powered by information from the OWASP Top 10, OWASP Mobile Security Top 10 and the OWASP API Security Top 10. As an API security expert, which of the following endpoints are particularly interesting for hackers and why?
{{List of Endpoints}}

// Books //
Hacking API’s by Corey J Ball: https://amzn.to/3JOJG0E 
Bug Bounty Bootcamp Vickie Li: https://amzn.to/3SPCtBF

// YouTube Video REFERENCE //
Free API Hacking Course!:    

 • Free API Hacking course!  

// Corey SOCIAL //
LinkedIn:  
 / coreyjball  
X / Twitter:  
 / hapi_hacker  
GitHub:  https://github.com/hAPI-hacker/Hackin...

// David SOCIAL //

Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com


Disclaimer: This video is for educational purposes only. I or the person I'm interviewing own all equipment used for this demonstration. No actual attack took place on any websites.

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

#api #hack #hacking

#456: Free Hacking API courses (And how to use AI to help you hack)

Big thanks to Brilliant for sponsoring this video!  To try everything Brilliant has to offer for free for a full 30 days and 20% discount visit: https://Brilliant.org/DavidBombal

I interview Dolev Farhi and Nick Aleks - the authors of Black Hat Bash and Black Hat GraphQL. Why should you learn either of these? Good reasons including $50K bug bounties :)

// Books //
Black Hat Bash:
USA: https://amzn.to/3JebZWJ 
UK: https://amzn.to/3PXnk1i

Black Hat GraphQL: 
USA: https://amzn.to/43Y3Ork
UK: https://amzn.to/3xtle2J

Hacking API’s by Corey J Ball:  https://amzn.to/3TQnp89 US and https://amzn.to/3vXYQxX UK

// Dolev Farhi’s SOCIAL//
GitHub:  https://github.com/dolevf
X:  https://x.com/dolevfarhi

// Nick Aleks’ SOCIAL //
X:  https://x.com/nick_aleks
LinkedIn:   

 / nick-aleks-2b35389  
GitHub:  https://github.com/nicholasaleks

// Source LINK //
https://github.com/nicholasaleks/Damn...

// YouTube videos REFERENCE //
Free API Hacking course!:    

 • Free API Hacking course!  

Free Hacking API courses (And how to use AI to help you hack):    

 • Free Hacking API courses (And how to ...  

// David's SOCIAL //

Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal


// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

Disclaimer: This video is for educational purposes only. 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Black Hat Bash: Bash Scripting for Hackers and Pentesters (Bonus: GraphQL and Drone hacking)

#464: Black Hat Bash: Bash Scripting for Hackers and Pentesters (Bonus: GraphQL and Drone hacking)

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

Popular tracks tagged #hacking_api