Hack-Proof Your API: Exclusive Attack Simulator Deep Dive 🛡️
summary
Claim: an attack simulator converts a Postman session into hundreds of modified sessions to automatically find exploitable API bugs. It uses Postman input as the seed, generates variants (example run produces 127 variants), runs each session, and scores responses to surface issues like SQL injection, parameter type mismatches and OWASP Top 10 failures. The tool outputs vulnerability reproductions and suggested remediations, and the demo shows automated detection of broken object level authorization (BOLA) and other real issues.
AI-written summary · about
chapters (7)
- 0:00Intro
- 1:05Understanding API Attack Simulators
- 4:50Outcomes of API Attack Simulations
- 6:55Executing API Attack Simulations
- 20:13Q&A Session
- 23:20Trends in API Security Attacks
- 24:36Closing Remarks
related talks
15mJumpstart Security & Penetration Testing APIs
26mOffensive API Penetration Testing
53mHacking And Defending APIs: Red And Blue Make Purple
22mAPI Security Testing with Postman: Best Practices and Techniques
35mHow to Break API's
08mAutomated Security Testing for JS Apps
21mAttack of the Clones! How AI can boost your API Security!
46mAPI Security – Divide & Conquer