Top Tweets for #API_testing
Hi All We are #Hiring One of our CLIENT is #API_Testing Location :#PANIndia #Exp: 5+Yrs Interested Can share to Email Id: [email protected]
Hope you like Thread🧵on : API-Security-Tips v2 ☝🏻
#bugbounty #api_testing #infosec
Follow you for more
Join my Bugbountytips group : https://t.co/rOrOkVvODl
API-Security-Tips🌵
Old version of API tend to be more vulnerable
Saw a call to api/v3/login? Check api/v1/login exists as well It might be more vulnerable
#cybersecurity #hacking #bugbounty #bugbountytips #infosec #APIsecurity
API TIP: 1/10👇🏿✔
➡ Testing AuthN APIs? If you test in production, there's a good chance that AuthN endpoints have anti brute-force protection. Anyhow, DevOps engineers tend to disable rate limiting in non-production environments. Don't forget to test them :)
#api_testing
API TIP🧵(10/11) :👇
➡ Which features do you find tend to be more vulnerable? I'll start:
▪ Organization's user management
▪ Export to CSV/HTML/PDF
▪ Custom views of dashboards
▪ Sub user creation&management
▪ Object sharing (photos, posts,etc)
#bugbounty #api_testing
API TIP🧵(9/11) :👇
➡ Companies & developers tend to put more resources (including security) into the main APIs. Always look for most niche features that nobody uses to find interesting vulnerabilities. POST /api/profile/upload_christmas_voice_greeting
#bugbounty #api_testing
API TIP🧵(8/10) :👇
➡ Got stuck during an API pentest? Expand your attack surface! Find sub/sibling domains using https://t.co/041x7ZDuIZ & https://t.co/nHXnNGZSgC. Some of these domains might expose the same APIs with different configurations/versions.
#bugbounty #api_testing
API TIP🧵(5/10) :👇
➡ Use Mass Assignment to bypass security mechanisms. E.g., "enter password" mechanism: #api_testing
POST /api/reset_pass requires old password.
PUT /api/update_user is vulnerable to MA == can be used to update pass without sending the old one (For CSRF)*
API TIP🧵(4/10) :👇
➡ The API uses Authorization header? Forget about CSRF! If the authentication mechanism doesn't support cookies, the API is protected against CSRF by design.
#bugbounty #Infosec #api_testing
API TIP🧵(3/10) :👇
Looking for #Automation #Testing Leads with #Javascript #API_Testing #TestCafe #Protractor_Framework 30-35LPA #Bangalore. Immediate Joiners!!
https://t.co/IDzvpYDmhQ
هرکی Fake Data واسه Rest API میخواد سایت https://t.co/TpzGONm5Rm خیلی به درد بخوره. یه مشته Rest API داره که بهتون response میده.
مثلا من خودم اون موقع که میخواستم Postman یاد بگیرم خیلی به دردم خورد.
#API_testing
#تست_API
#Fake_Data
#Rest_API
اختبار الواجهات البرمجية #API_Testing أحد أهم الاختبارات وينبغي عدم تجاهلها لعدة أسباب:
👈 لأنها تسهل من اختبارات التكامل
👈 تقلل وقت تطوير و #اختبار_البرمجيات
👈 تعمل على تقليل المخاطر بشكل كبير
👈 من خلالها يمكن محاكاة المخاطر الأمنية بسهولة
وغيره من الأسباب في التصميم التالي
Last Seen Hashtags on Sotwe
Gorge_profonde
Seen from United States
GlobalHealthAllianceUK
Seen from United States
GoogleSecOps
Seen from United States
minichatt()()()()()()()()()()()()()()()********************** +filter:native_video
minichat minichat()video
thighhighstockings
Seen from United Kingdom
anxiouspanda
Seen from Poland
CaughtOnCamera
Seen from Australia
minichat()()()()()**********filter:videos
Seen from Turkey
istriteman
Seen from Indonesia
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.7M followers