CAPIE
Certified API Pentesting Industry Expert
1.0 An Introduction to AP
1.1 What is
API ?
1.1 what is an api
● Definition:
○ Application Programming Interface
○ sometimes apps need to communicate
○ Can be on different levels - OS, web …
○ We will focus on web APIs
● The importance of APIs in today’s digital age
4
2. Types of api
● Web APIs (e.g. REST, SOAP, GraphQL).
● Database APIs
● Operating system APIs
● Library & Framework APIs
5
3. How apis work
● Request & Response Model.
● HTTP Methods (GET, POST, PUT, DELETE).
● Status Codes.
6
4. Api components
● Endpoints
● Parameters
● Headers
● Payload/Body.
7
5. AUTHENTICATION & AUTHORIZATION
● API Keys.
● OAuth.
● JWT (JSON Web Tokens).
● Basic Authentication.
8
6. Common use cases of apis
● Integration between software applications.
● Mobile apps fetching data.
● Web apps interacting with backend servers.
● Third-party integrations.
9
7. Benefits of using apis
● Scalability.
● Modularity.
● Time-saving.
● Integration capabilities.
10
8. Potential risks
● Brief introduction to why API security is crucial (this
will set the stage for subsequent lessons in
pentesting).
11
9. Api documentation & testing tools
● Importance of clear API documentation.
● Introduction to tools like Postman & Swagger.
https://developers.strava.com/playground/
12
10. Conclusion & what’s next
● A recap of the important & function of APIs.
● A teaser for the next lesson, which will likely delve
deeper into security aspects.
13