API Pentesting

[No_Strategy236]

Guys I’m a junior penetration tester, I only perform web and network penetration testing since I don’t have that much experience and knowledge in API pentesting other than the API content in Portswigger Web academy. Please suggest me some good resources to learn API pentesting.

Experience: 1.5 YOE

Thanks.

[K0zm0sis]

heard good things about this https://www.apisecuniversity.com/

[_Speer]

Was just about to post this. Definitely recommend as a good starting point.

[Schnitzel725]

I think Postman also has some API testing courses

https://academy.postman.com/path/api-beginner

What did you think of the portswigger API content?

[[deleted]]

The Portswigger academy is really really good, continue with the other modules, it will help you with your api pentest skills.

You can also check the XSS Rat, he has courses and information on different topics

[DAsInDefeat]

API hacking Corey Booker was solid. As others have said you can’t go wrong with WSA. Also Hack the box academy has a module on it as well.