API Badge

21 Videos
19 Exercises

Exercises

Easy
API 01
  • This exercise is the API version of an exercise you already solved in the Essential Badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
  • 1 video
  • Completed by 2426 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • API
  • cwe-639,cwe-284

 

Easy
API 02
  • This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
  • 1 video
  • Completed by 2015 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • API
  • CWE-327

 

Easy
API 03
  • This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
  • 1 video
  • Completed by 1505 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • API
  • CWE-327

 

Easy
API 04
  • This exercise covers how one can inspect JavaScript code to identify unused endpoints.
  • 1 video
  • Completed by 1480 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • API, Angular
  • CWE-1028

 

Easy
API 05
  • This exercise covers how one can inspect JavaScript code to identify unused endpoints.
  • 1 video
  • Completed by 1417 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • API, Angular
  • CWE-1028

 

Easy
API Payments 01
  • This exercise covers a simple payments bypass.
  • 2 videos
  • Completed by 1063 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • API
  • CWE-288,CWE-354,CWE-472

 

Easy
API 06
  • This exercise covers how one can inspect JavaScript code to identify unused endpoints.
  • 1 video
  • Completed by 1163 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • API, Angular
  • CWE-1028

 

Easy
API Payments 02
  • This exercise covers a simple payments bypass.
  • 2 videos
  • Completed by 873 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • CWE-354,CWE-472

 

Easy
API Payments 03
  • This exercise covers a simple payments bypass.
  • 2 videos
  • Completed by 744 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • CWE-354,CWE-472

 

Easy
API Payments 04
  • This exercise covers how to abuse a shopping cart allowing users to apply a voucher..
  • 2 videos
  • Completed by 639 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • CWE-472

 

Easy
API Payments 06
  • This exercise covers a simple payments bypass.
  • 2 videos
  • Completed by 475 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • CWE-472

 

Easy
API Payments 07
  • This exercise covers a way to manipulate a shopping cart to lower the total amount
  • 2 videos
  • Completed by 445 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • CWE-353

 

Easy
API 07
  • This exercise covers how one can inspect JavaScript code to identify information leak.
  • 1 video
  • Completed by 1028 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • API, Angular
  • CWE-950

 

Easy
API 08
  • This exercise covers how one can inspect HTTP responses to identify information leaks.
  • 1 video
  • Completed by 959 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • CWE-200

 

Easy
API 09
  • This exercise covers how one can inspect HTTP responses to identify information leaks.
  • Completed by 101 students
  • Takes < 1 Hr. on average
  • Rails/Angular

 

Easy
Mongo IDOR
  • This challenge covers how to exploit an IDOR when Mongo IDs are used
  • Completed by 661 students
  • Takes < 1 Hr. on average
  • ROR/MongoDB

 

Coming soon
Medium
API Mobile 01
  • This exercise covers how you can intercept traffic from a mobile application and uses this to gain access to sensitive information.
  • Takes -- on average
  • Node/React Native

 

Coming soon
Medium
Mongo IDOR II
  • This challenge covers how to recover a Mongo ID to leverage an IDOR
  • Takes -- on average
  • ROR/MongoDB

 

Hard
API Payments 05
  • This exercise covers how to abuse a shopping cart allowing users to apply a voucher.
  • 1 video
  • Completed by 446 students
  • Takes < 1 Hr. on average
  • Rails/Angular
  • CWE-345,CWE-693