Top Tweets for #api_testing
Hi All We are #Hiring One of our CLIENT is #API_Testing Location :#PANIndia #Exp: 5+Yrs Interested Can share to Email Id: [email protected]
Hope you like Thread🧵on : API-Security-Tips v2 ☝🏻
#bugbounty #api_testing #infosec
Follow you for more
Join my Bugbountytips group : https://t.co/rOrOkVvODl
API-Security-Tips🌵
Old version of API tend to be more vulnerable
Saw a call to api/v3/login? Check api/v1/login exists as well It might be more vulnerable
#cybersecurity #hacking #bugbounty #bugbountytips #infosec #APIsecurity
API TIP: 1/10👇🏿✔
➡ Testing AuthN APIs? If you test in production, there's a good chance that AuthN endpoints have anti brute-force protection. Anyhow, DevOps engineers tend to disable rate limiting in non-production environments. Don't forget to test them :)
#api_testing
API TIP🧵(10/11) :👇
➡ Which features do you find tend to be more vulnerable? I'll start:
▪ Organization's user management
▪ Export to CSV/HTML/PDF
▪ Custom views of dashboards
▪ Sub user creation&management
▪ Object sharing (photos, posts,etc)
#bugbounty #api_testing
API TIP🧵(9/11) :👇
➡ Companies & developers tend to put more resources (including security) into the main APIs. Always look for most niche features that nobody uses to find interesting vulnerabilities. POST /api/profile/upload_christmas_voice_greeting
#bugbounty #api_testing
API TIP🧵(8/10) :👇
➡ Got stuck during an API pentest? Expand your attack surface! Find sub/sibling domains using https://t.co/041x7ZDuIZ & https://t.co/nHXnNGZSgC. Some of these domains might expose the same APIs with different configurations/versions.
#bugbounty #api_testing
API TIP🧵(5/10) :👇
➡ Use Mass Assignment to bypass security mechanisms. E.g., "enter password" mechanism: #api_testing
POST /api/reset_pass requires old password.
PUT /api/update_user is vulnerable to MA == can be used to update pass without sending the old one (For CSRF)*
API TIP🧵(4/10) :👇
➡ The API uses Authorization header? Forget about CSRF! If the authentication mechanism doesn't support cookies, the API is protected against CSRF by design.
#bugbounty #Infosec #api_testing
API TIP🧵(3/10) :👇
Looking for #Automation #Testing Leads with #Javascript #API_Testing #TestCafe #Protractor_Framework 30-35LPA #Bangalore. Immediate Joiners!!
https://t.co/IDzvpYDmhQ
هرکی Fake Data واسه Rest API میخواد سایت https://t.co/TpzGONm5Rm خیلی به درد بخوره. یه مشته Rest API داره که بهتون response میده.
مثلا من خودم اون موقع که میخواستم Postman یاد بگیرم خیلی به دردم خورد.
#API_testing
#تست_API
#Fake_Data
#Rest_API
اختبار الواجهات البرمجية #API_Testing أحد أهم الاختبارات وينبغي عدم تجاهلها لعدة أسباب:
👈 لأنها تسهل من اختبارات التكامل
👈 تقلل وقت تطوير و #اختبار_البرمجيات
👈 تعمل على تقليل المخاطر بشكل كبير
👈 من خلالها يمكن محاكاة المخاطر الأمنية بسهولة
وغيره من الأسباب في التصميم التالي
Last Seen Hashtags on Sotwe
bocil coli
Seen from Indonesia
yaoi #trunks
Seen from Spain
MGAI
Seen from United States
น้องเวฟวี่
Seen from Thailand
anaswararajanhot
Seen from India
mersintravesti
Seen from Turkey
izmirpasif
Seen from Turkey
minichattt
Seen from Netherlands
CaughtOnCamera
Seen from United States
minichatt anxiouspandaa filter:videos
Seen from United States
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.7M followers