API Hacking Demo | Bug Bounty Web App Testing

All my videos are for educational purposes with bug bounty hunters and penetration testers in mind YouTube don't take down my videos 😉

Apparently my JWT video is only on my website I will try to post that video to youtube in the next week 😁

0:00 About API hacking
0:47 Identifying API with nmap
2:15 Enumeration the URL
6:30 Creating a user
9:00 logging into api server
13:01 closing

[jimball]

Thanks man. Coming late to the game. I’ve got a fair amount of testing in on-prem environments… not so much on the web app testing side. Your videos REALLY help.

[scarytruths]

This tutorial is very helpful over half the bug bounties programs. iv looked at pretty much all of them have some kind of API or website testing.

[TylerRake]

Love this video ❤️ this could make such a amazing series

[xenmode]

Love your content, highly appreciated. Could you do a video on writing pentest and bug bounty reports?

[panagiotismitkas]

Best bug bounty/web hacking content out there, thank you for that. Api hacking could be a full course for you to consider making if possible

[himanshu]

For Educational purpose if you want to go for api security refer to apisec university thats free course covering whole api testing

[mohammadfazlerabbi]

Your contents are great..keep providing us the knowledge.

[xxehacker]

Sir its amazing video . I like it, please make more videos on this topic 👨‍💻

[namanjain]

thanks for the video, Would love to wait for the full API hacking course XD.

Also I would like to know about the box you are practicing in. like the name of the box or the link of the machine (:

[thantzin]

Thank you so much this helped a lot!!!! You saved my life

[robinhood]

Pls make a full course on api hacking... You are awesome

[skysunset]

This is SSOOOO COOOOLLL!! Thank you very much!

[lowkeylyesmith]

I hope I can do that one day. I'm just getting to grips with the subject, but I have no idea where and how to start. I work in IT forensics and only have Python and Bash programming skills, but I have no idea about web development.
Do you have any tips for a tutorial/book/course?

[atlantictecnologia]

God, I'm glad I found your video that helped me

[iqyou-gwkd]

ilove you man I hope one day I can be just like you

[lIlIllll]

Can you show a API hacking video when one has the swagger json file already. To show the process of loading it into postman and testing OWASP API Top Ten?

[emmanuelochubili]

can you do a video on finding and enumerating private apis please

[SunnySharma-ggok]

Which testing is good api testing or web penetration testing

[tommex]

How to bypass "you have no permission to list users" ?

[tactical_arabe]

Many people told me that most of the bug hunters use cracked copy of expensive tools, not sure how true is this