Scribd
Upload
2 views3 pages

API Basics

The document discusses APIs (Application Programming Interfaces) and their critical role in modern applications like Instagram and Uber, enabling communication between systems. It outlines how APIs work, common types such as REST and SOAP, and the importance of API security, highlighting vulnerabilities like broken authentication and excessive data exposure. Additionally, it mentions popular API testing tools and emphasizes the benefits of mastering APIs for web development and cybersecurity.

Uploaded by

emmanuelkandukuri03
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
2 views3 pages

API Basics

The document discusses APIs (Application Programming Interfaces) and their critical role in modern applications like Instagram and Uber, enabling communication between systems. It outlines how APIs work, common types such as REST and SOAP, and the importance of API security, highlighting vulnerabilities like broken authentication and excessive data exposure. Additionally, it mentions popular API testing tools and emphasizes the benefits of mastering APIs for web development and cybersecurity.

Uploaded by

emmanuelkandukuri03
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

A few days ago, I tasked myself to dig dipper into APIs and their security vulnerabilities.

knowing that sharing knowledge is broading it, i am delighted to share


my take aways.

APIs & API Security


Modern apps like:
• Instagram, WhatsApp, Uber, Amazon etc..
heavily rely on APIs.

But what is an API?

API = Application Programming Interface.

An API in my words is a means that allows two applications to communicate with each other un
bothered of what is happening of the other end.

APIs allow applications to communicate with each other.

Think of an API as a messenger between systems.

Real-Life Example
When you order food in a delivery app:
1. App sends API request
2. Server processes request
3. Database returns restaurant data
4. API sends response back to app

How APIs Work


Step 1: Client Sends Request
Example: GET /users

Step 2: Server Processes Request


Backend checks request

Step 3: Database Access


Server fetches data if needed

Step 4: API Response Sent


Usually in JSON format 👇

{
"name": "Rahul",
"role": "Admin"
}

Common API Types


REST API is the most common

SOAP API : Older enterprise systems

GraphQL : Flexible data queries

....REST API Basics


REST APIs use HTTP methods:

Method:
1. GET: Fetch data
2. POST: Create data
[Link]: Update data
4. DELETE : Remove data

API Authentication
APIs often use:
• API keys
• Tokens
• OAuth authentication
to verify users/apps

API Security Risks


API are however the biggest surface attacks in cyber security today.
APIs are frequently attacked using:
>Broken Authentication
Weak login/token systems

> Excessive Data Exposure


Returning sensitive information

> Rate Limit Abuse


Sending too many requests

> Insecure APIs


Poor validation/security checks

Real-Life Cybersecurity Example


A hacker may try to:
> Access hidden API endpoints
> Manipulate requests
> Steal tokens
> Extract sensitive data

APIs are heavily tested during penetration testing


Popular API Testing Tools
- Postman
- Burp Suite
- Insomnia
- Curl

Mastering APIs, will help you improve in:


[Link] development
[Link] systems
3. Ethical hacking
[Link] bounty hunting
5. etc

You might also like