~/talk

API Security Testing

TalkinRussianat QA Fest 2019 · 2019-09-20..09-21· [security]
links:none on file
slides:none on file

Covers security testing specific to APIs versus web apps, describes common API vulnerabilities and how to find them, and demonstrates tools to automate API security testing while advising which tools suit which application types. Targets listeners with basic security testing knowledge and familiarity with injection attacks.

AI-written summary · about

  1. 0:00Start
  2. 6:40BROKEN OBJECT LEVEL ACCESS CONTROL
  3. 8:56BROKEN AUTHENTICATION
  4. 22:59MISSING FUNCTION LEVEL ACCESS CONTROL
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.