You need to learn how to hack APIs in 2022. This is the future battlefront! Ignore this at your own peril. 

// MENU //
00:00 ▶️  Coming up
00:44 ▶️  Intro
00:53 ▶️  Alissa Knight introduction and background
02:36 ▶️  Published author and filmmaker
03:30 ▶️  Alissa Knight YouTube channel
05:02 ▶️  Book on API hacking
06:05 ▶️  The definition of hacking
10:25 ▶️  How to approach hacking
14:10 ▶️  The importance of learning
16:07 ▶️  How to start hacking APIs
22:54 ▶️  "The Desire"
25:35 ▶️  Recommended certifications
28:35 ▶️  Understanding Networking fundamentals
30:04 ▶️  Do you have to be a programmer to hack?
33:09 ▶️  Mastering tools
34:33 ▶️  Hacking APIs
38:43 ▶️  Shift left security, shield right
40:15 ▶️  Bank app developed by marketing team
42:51 ▶️  Smart phone takeover
45:10 ▶️  How to learn to hack APIs
48:11 ▶️  Process on how to hack APIs
55:05 ▶️  Implementing authorization and authentication
56:43 ▶️  APIs in nuclear plant systems
58:52 ▶️  Wifi pineapple
01:01:23 ▶️  Securing APIs in cars
01:03:18 ▶️  "Exciting times"
01:05:45 ▶️  Conclusion

Nahamsec Interview: https://youtu.be/Y2Y4Sk0PswU

// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal 

// Alissa's SOCIAL //
Twitter: https://twitter.com/alissaknight
YouTube: https://www.youtube.com/alissaknight
Instagram: https://www.instagram.com/alissaknight/
LinkedIn: https://www.linkedin.com/in/alissakni...
Website: https://www.alissaknight.com/
Hacking Bank APIs: https://davidbombal.wiki/hackingbankapis

// Katie Paxton-Fear //
YouTube: https://www.youtube.com/c/InsiderPhD
Twitter: https://twitter.com/insiderphd

// David Sopas //
Twitter: https://twitter.com/dsopas
Github API mindmap: https://github.com/dsopas/MindAPI

// Hyperfocus daily task sheet //
Alissa Knight's Daily Task Sheet: https://davidbombal.wiki/dailytasks

// BOOKS //
Hacking Connected Cars - Alissa Knight:  https://amzn.to/3Ke00GO 
Hyper Focus - Chris Bailey:  https://amzn.to/3vAocxO 
Self Journal by BestSelf: https://amzn.to/3ks1BhK
Hacking APIs - Corey Ball: https://amzn.to/37PUwoI
The Official (ISC)2 CISSP CBK Reference: https://amzn.to/3vxzjJ2

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

api
apis
postman
burpsuite
hacking
hacking cars
hacking connected cars
hacking api
cyber security
information security
sans institute
cybersecurity training
cyber security training
information security training
cyber
hack
privacy
nsa
oscp
ceh

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

#hacking #infosec #cyber

#375: Hacking APIs and Cars: You need to learn this in 2022!

I interview Corey Ball who wrote the book "Hacking APIs" and he tells us about his book and the free training he is making available. This is a cool announcement :)

// MENU //
00:00 - Why talk about pentesting at all?
00:21 - Welcome//Corey
00:48 - What is an API and Why Care?
01:52 - Free API Hacking Course!
02:11 - Overview//Course
02:28 - Do I Need the Book to do the Course?
02:39 - Pre-reqs for Course
03:07 - Cert//When?
03:22 - Hacking APIs//Origin Story
05:34 - The Start//USPS Data Leak
07:31 - OWASP Top 10 Explained
07:49 - API1//Broken Object Level Authorization
08:46 - Testing for BOLA
09:59 - API2//Broken User Authentication
10:35 - Leaked API Keys on GitHub?
10:59 -  API3//Excessive Data Exposure
12:05 -  API9//Improper Asset Management
13:53 - The World is Running on APIs
14:53 - Who is this Book For?
16:19 - Set Up Hacking Lab
17:47 - You Just Need a Laptop to Start Hacking!
17:52 - Free API Hacking Tools
20:14 - What is Kiterunner
20:47 - Gobuster vs Kiterunner 
21:51 - Free Wordlists!
22:05 - What is fuzzing and free fuzzing tool
23:17 - More Tools?
23:47 - How To Find APIs
25:02 - Using nmap to find APIs?
26:09 - Hacking APIs as your start in hacking
28:09 - Difference//REST//GraphQL
29:07 - Learn REST or GraphQL?
31:07 - Take a University Course?
31:44 - Hacking Certifications//Worth It?
33:42 - Being Hacked//How Corey Started 
36:31 - Corey's OSCP Experience
38:09 - Hacking APIs As An Alternative Path
38:41 - Resources to Start With 
39:26 - Ten Years of Experience?
39:52 - Huge Demand for Hacking APIs
40:25 - The Course is Completely Free
40:47- Breaking Barriers!
41:37 - Thank You & Final Words

// Free API hacking course //
APIsec Certified Expert Course: https://university.apisec.ai/

// Defcon Workshop notes //
https://sway.office.com/HVrL2AXUlWGNDHqy

// Books //
Hacking API’s by Corey J Ball: https://amzn.to/3JOJG0E 
Bug Bounty Bootcamp Vickie Li: https://amzn.to/3SPCtBF

// YouTube channels mentioned //
InsiderPHD: https://www.youtube.com/c/InsiderPhD
IppSec: https://www.youtube.com/c/ippsec/videos

// Corey SOCIAL //
LinkedIn: https://www.linkedin.com/in/coreyjball/
Twitter: https://twitter.com/hAPI_hacker

// David SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal 

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

hacking api
api
api hacking
api hacking tutorial
api hacking bug bounty
api hacking 101
api hacking full course
api hacking tools
api hacking alissa knight
api hacking with postman
api hacking for beginners
api hacker
api hacking demo
api hacking kali linux
api hacking course
api hacking insiderphd
hacking an api
hack api
owasp api top 10
bug bounty
hacking apis no starch press
hacking api no starch
hacking apis pdf
hacking api book
hacking apis corey ball
corey ball hacking apis
reverse engineering
private api
apis for beginners
rest api
hacking api with postman
reverse engineering for beginners
hacking api key
what is an api
rest apis with postman for absolute beginners
rest api explained

#api #hack #hacking

#399: Free API Hacking course!

This is a FREE complete CCNP 350-401 ENCOR Course. In this first REST API video we start our discussion of RESTful (REST) Application Programming interfaces (APIs). We look at some practical examples and start our theory discussion. This is the first of multiple REST API videos. In subsequent videos I'll show you practical demonstrations using both PostMan and Python scripts to interact with Cisco's DNA Center and a Cisco router.

It's important that you learn both REST APIs and Python for the ENCOR exam as well as the real world.

I will be covering all the topics in the Cisco CCNP ENCOR exam in this course. I want to make this content practical and it will include a lots of labs and demonstrations to help you better understand topics on the exam.

Slides: 
https://bit.ly/encorapi1

CCNP ENCOR playlist:
https://bit.ly/freeccnp

Menu:
Overview: 0:01
API Example: 0:18
Why do we care: 0:35
Alexa API demo: 1:15
What we are going to cover: 2:49
Real world reasons: 6:30
REST API Theory: 7:52

======================
Special Offers:
======================
Cisco Press: Up to 50% discount
Save every day on Cisco Press learning products! Use discount code BOMBAL during checkout to save 35% on print books (plus free shipping in the U.S.), 45% on eBooks, and 50% on video courses and simulator software. Offer expires December 31, 2020. Shop now. 
Link: bit.ly/ciscopress50

Boson software: 15% discount
Link: bit.ly/boson15
Code: DBAF15P

#138: Free CCNP 350-401 ENCOR Complete Course: 6.4: REST APIs Part 1

This is a FREE complete CCNP 350-401 ENCOR Course. In this second REST API video I demonstrate the use of REST APIs using Cisco DNA Center. We post PostMan to POST and GET information from the server. You need to know (REST) Application Programming interfaces (APIs) for the CCNP ENCOR exam. In the next video we interact with a REST API on a Cisco router.

It's important that you learn both REST APIs and Python for the ENCOR exam as well as the real world.

I will be covering all the topics in the Cisco CCNP ENCOR exam in this course. I want to make this content practical and it will include a lots of labs and demonstrations to help you better understand topics on the exam.

Slides: 
https://bit.ly/encorapi2

Previous video:
https://youtu.be/5iA_ZBcFwEU

CCNP ENCOR playlist:
https://bit.ly/freeccnp

Menu:
Overview: 0:01
Cisco DNA Center Demo: 1:37
Postman download and installation: 3:35
REST API token: 5:10
REST GET 8:29
REST API Filtering: 11:50
REST API Codes: 14:15
Full DNA Lab: 18:35

======================
Special Offers:
======================
Cisco Press: Up to 50% discount
Save every day on Cisco Press learning products! Use discount code BOMBAL during checkout to save 35% on print books (plus free shipping in the U.S.), 45% on eBooks, and 50% on video courses and simulator software. Offer expires December 31, 2020. Shop now. 
Link: bit.ly/ciscopress50

Boson software: 15% discount
Link: bit.ly/boson15
Code: DBAF15P

GNS3 Academy:
CCNA ($10): bit.ly/gns3ccna10
Wireshark ($10): bit.ly/gns3wireshark

DavidBombal.com
CCNA ($10): bit.ly/ccnafor10
Wireshark ($9): bit.ly/wireshark9

======================
Free and trial Network Software:
======================
Engineers Toolset: http://bit.ly/gns3toolset
Solar-PuTTY: http://bit.ly/SolarPutty
SolarWinds NPM: http://bit.ly/getnpm
SolarWinds TFTP Server: http://bit.ly/2mbtD6j
WAN Killer: http://bit.ly/wankiller
IP Address Scanner: http://bit.ly/swipscan
Network Device Scanner: http://bit.ly/swnetscan
Wifi Heat Map: http://bit.ly/wifiheat
Wifi Analyzer: http://bit.ly/swwifianalyzer

Python
REST API
JSON
CCNP
CCIE
CCNP ENCOR
CCNP 350-401
CCNP Enterprise
ccnp training
CCNP Security
CCNP Data Center
CCNP Service Provider
CCNP Collaboration
Cisco Certified Devnet Professional
Cisco Certified Network Professional

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 


#ccnp #encor #restapi

#139: Free CCNP 350-401 ENCOR Complete Course: 6.4: REST APIs Part 2

This is a FREE complete CCNP 350-401 ENCOR Course. In this third REST API video I demonstrate the use of REST APIs using a Cisco IOS XE device. We use PostMan to GET, POST and DELETE interfaces on the IOS XE device. You need to know (REST) Application Programming interfaces (APIs) for the CCNP ENCOR exam. In the next video we will interact with a REST API on a Cisco router using a Python script.

It's important that you learn both REST APIs and Python for the ENCOR exam as well as the real world.

I will be covering all the topics in the Cisco CCNP ENCOR exam in this course. I want to make this content practical and it will include a lots of labs and demonstrations to help you better understand topics on the exam.

Slides: 
https://bit.ly/encorapi3

Previous video:
https://youtu.be/p-3QHCt1L_w

CCNP ENCOR playlist:
https://bit.ly/freeccnp

Menu:
Overview: 0:01
Connect to DevNet IOS XE device: 1:56
REST API GET: 3:12
REST API POST: 6:43
REST API DELETE: 10:38

======================
Special Offers:
======================
Cisco Press: Up to 50% discount
Save every day on Cisco Press learning products! Use discount code BOMBAL during checkout to save 35% on print books (plus free shipping in the U.S.), 45% on eBooks, and 50% on video courses and simulator software. Offer expires December 31, 2020. Shop now. 
Link: bit.ly/ciscopress50

Boson software: 15% discount
Link: bit.ly/boson15
Code: DBAF15P

#140: Free CCNP 350-401 ENCOR Complete Course: 6.4: REST APIs Part 3

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

Popular tracks tagged #rest_api