購物比價找書網找車網
FindBook  
 有 1 項符合

Pentesting APIs: A practical guide to discovering, fingerprinting, and exploiting APIs

的圖書
Pentesting APIs: A practical guide to discovering, fingerprinting, and exploiting APIs Pentesting APIs: A practical guide to discovering, fingerprinting, and exploiting APIs

作者:Harley 
出版社:Packt Publishing
出版日期:2024-09-27
語言:英文   規格:平裝 / 290頁 / 23.5 x 19.05 x 1.55 cm / 普通級/ 初版
圖書選購
型式價格供應商所屬目錄
 
$ 2474
博客來 博客來
網頁
圖書介紹 - 資料來源:博客來   評分:
圖書名稱:Pentesting APIs: A practical guide to discovering, fingerprinting, and exploiting APIs

內容簡介

Learn the essential steps to successfully identify and leverage API endpoints with a sequenced and structured approach

Key Features:

- Gain detailed insights into vulnerabilities and attack vectors for RESTful and GraphQL APIs

- Follow practical advice and best practices for securing APIs against potential threats

- Explore essential security topics, potential vulnerabilities, common attack vectors, and the overall API security landscape

- Purchase of the print or Kindle book includes a free PDF eBook

Book Description:

Understanding API security is crucial as APIs form the backbone of modern interconnected applications, making them prime targets for cyberattacks. Drawing on nearly 30 years of cybersecurity experience and an extensive background in network security and forensic analysis, this book provides the knowledge and tools to strengthen your API security practices and protect against cyber threats comprehensively.

This book begins by establishing a foundational understanding of APIs, particularly focusing on REST and GraphQL, emphasizing their critical role and potential security vulnerabilities. It guides you through setting up a penetration testing environment to ensure the practical application of concepts. You’ll learn reconnaissance techniques, information-gathering strategies, and the discovery of API vulnerabilities. Authentication and authorization testing are thoroughly explored, covering mechanisms, weaknesses, and methods to bypass security controls. By comprehensively addressing these aspects, the book equips you to understand, identify, and mitigate risks, strengthening API security and effectively minimizing potential attack surfaces.

By the end of this book, you’ll have developed practical skills to identify, exploit, and secure APIs against various vulnerabilities and attacks.

What You Will Learn:

- Get an introduction to APIs and their relationship with security

- Set up an effective pentesting lab for API intrusion

- Conduct API reconnaissance and information gathering in the discovery phase

- Execute basic attacks such as injection, exception handling, and DoS

- Perform advanced attacks, including data exposure and business logic abuse

- Benefit from expert security recommendations to protect APIs against attacks

Who this book is for:

This book is for security engineers, particularly those focused on application security, as well as security analysts, application owners, web developers, pentesters, and all curious enthusiasts who want to learn about APIs, effective testing methods for their robustness, and how to protect them against cyber attacks. Basic knowledge of web development, familiarity with API concepts, and a foundational understanding of cybersecurity principles will help you get started with this book.

Table of Contents

- Understanding APIs and their Security Landscape

- Setting Up the Penetration Testing Environment

- API Reconnaissance and Information Gathering

- Authentication and Authorization Testing

- Injection Attacks and Validation Testing

- Error Handling and Exception Testing

- Denial of Service and Rate -Limiting Testing

- Data Exposure and Sensitive Information Leakage

- API Abuse and Business Logic Testing

- Secure Coding Practices for APIs

 

詳細資料

  • ISBN:9781837633166
  • 規格:平裝 / 290頁 / 23.5 x 19.05 x 1.55 cm / 普通級 / 初版
  • 出版地:美國
贊助商廣告
 
 
金石堂 - 暢銷排行榜
人妻特區(01)
作者:大見武士
出版社:青文出版社股份有限公司
出版日期:2024-11-04
$ 111 
Taaze 讀冊生活 - 暢銷排行榜
被討厭的勇氣:自我啟發之父「阿德勒」的教導
作者:岸見一郎、古賀史健
出版社:究竟出版
出版日期:2014-10-30
$ 237 
金石堂 - 暢銷排行榜
某某 戲劇寫真書The On1y One Photobook
作者:DragonFire International Co., Ltd
出版社:台灣角川股份有限公司
出版日期:2024-11-14
$ 379 
 
博客來 - 新書排行榜
陰陽眼見子 (10)
出版日期:2024-11-07
$ 110 
Taaze 讀冊生活 - 新書排行榜
21天開通內在指引:鍛鍊直覺精準度,接收你的「靈」對你最大的保護
作者:桑妮雅.喬凱特
出版社:橡實文化
出版日期:2024-11-08
$ 266 
Taaze 讀冊生活 - 新書排行榜
2025【108課綱主題+多元情境試題】升科大四技二專機件原理總複習測驗卷(升科大四技)
作者:蔡忻芸
出版社:千華數位文化股份有限公司
出版日期:2024-09-05
$ 135 
金石堂 - 新書排行榜
艷事染惑
作者:越山弱衰
出版社:未來數位有限公司
出版日期:2024-11-13
$ 237 
 

©2024 FindBook.com.tw -  購物比價  找書網  找車網  服務條款  隱私權政策