{"id":3786,"date":"2026-08-10T09:07:46","date_gmt":"2026-08-10T09:07:46","guid":{"rendered":"https:\/\/nokobox.com\/index.php\/item\/black-hat-attacking-and-securing-apis-2021-8\/"},"modified":"2026-08-10T09:07:46","modified_gmt":"2026-08-10T09:07:46","slug":"black-hat-attacking-and-securing-apis-2021-8","status":"publish","type":"digital_item","link":"https:\/\/nokobox.com\/index.php\/item\/black-hat-attacking-and-securing-apis-2021-8\/","title":{"rendered":"Black Hat \u2013 ATTACKING AND SECURING APIS 2021-8"},"content":{"rendered":"<div class=\"w-post-elm post_content\">\n<h2><span style=\"vertical-align: inherit\">Description<\/span><\/h2>\n<p data-sourcepos=\"5:1-5:332\"><span style=\"vertical-align: inherit\">ATTACKING AND SECURING APIS course. This intensive, hands-on training course focuses on security and attacks against API-based websites and cloud infrastructure. Today, APIs are everywhere: web applications, embedded systems, enterprise applications, cloud environments, and even the Internet of Things (IoT), and learning how to defend, secure, and attack API implementations and infrastructure is becoming more and more essential. This course is designed to teach how to build modern and secure APIs, while demonstrating new and old attack methods.<\/span><\/p>\n<h3 data-sourcepos=\"9:1-9:25\"><span style=\"vertical-align: inherit\">What you will learn:<\/span><\/h3>\n<ul>\n<li><span style=\"vertical-align: inherit\">Attacking and defending web APIs (REST, GraphQL, SOAP):<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Learn AJAX, REST and GraphQL security best practices.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Building APIs that are easy to use securely and difficult to use insecurely.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Techniques and tools for designing, testing and attacking APIs and microservices.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Mitigate and defend against XSS, CSRF, JSONP and CORS security vulnerabilities in APIs.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Implement secure webcast channels and webcast theft defense between websites.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Attacking and Securing Amazon Cloud Infrastructure and APIs (AWS):<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Building custom tools based on the Amazon API.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Attack and defend against serverless and Amazon problems such as S3 buckets exposure, EC2 vulnerabilities, Amazon confidential information, serverless event injection, etc.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Conduct post-attack exploitation and pivot attacks against AWS environments.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Perform modern injection attacks:<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Attack and defend against injection vulnerabilities such as template injection, SQL injection, NoSQL injection, pickle and YAML serialization, object injection, etc.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Applied cryptography for APIs:<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Knowing when to use signing, when to use encryption, and when to use both.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Implementation of secure and functional cryptography that has been tested in practice.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Implement secure communication channels with API consumers such as web browsers and mobile apps.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Securing passwords and confidential information in APIs:<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Learn how to effectively solve the credential storage problem.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Using cloud credential management solutions.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Use open source and platform independent credential management solutions.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Implementation of safe password storage and management.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">API authentication and authorization techniques:<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Understanding the complex details of authentication and authorization frameworks and technologies.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Gain practical knowledge and experience in using secure tokens, cookies, keys and tickets for authentication and authorization.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Proficiency in OAuth2, OpenIDC, JWT\/JWS and other authentication technologies.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Attacking and fixing insecure JWT and cookie implementations.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Attacking insecure implementations of session management, input validation, output encryption, and low-reliability components.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Implement and attack multi-factor authentication for APIs.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Designing a secure API architecture:<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">API security architecture and microservices.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Secure file management by allowing authorized downloads even in a partitioned microservices architecture.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Learn and understand cache security and what threats and vulnerabilities can arise from insecure cache configurations and methods.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Attacking and securing cache implementations and infrastructure.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Building a secure multi-layered infrastructure for modern applications.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Securing development environments:<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Secure source code using secure Git configurations and live monitoring.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Securing software dependency and supply chain.<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Secure development and management access using SSH, multi-factor authentication, and secure database hosts<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">And \u2026<\/span><\/li>\n<\/ul>\n<h3 data-sourcepos=\"15:1-15:32\"><span style=\"vertical-align: inherit\">Who is this course suitable for?<\/span><\/h3>\n<ul>\n<li data-sourcepos=\"3:1-3:186\"><span style=\"vertical-align: inherit\">This course is suitable for software developers, security engineers, system architects, researchers, bug hunters, system administrators, students and interested security professionals who want to expand their skills.<\/span><\/li>\n<li data-sourcepos=\"5:1-5:99\"><span style=\"vertical-align: inherit\">Overall, this course will be useful for anyone interested in maintaining up-to-date knowledge and skills in the world of cloud, API and application security.<\/span><\/li>\n<\/ul>\n<h3 data-sourcepos=\"11:1-11:29\"><span style=\"vertical-align: inherit\">Details of the ATTACKING AND SECURING APIS course<\/span><\/h3>\n<ul>\n<li><span style=\"vertical-align: inherit\">Publisher: <\/span><a href=\"https:\/\/href.li\/?https:\/\/www.blackhat.com\/eu-19\/training\/schedule\/#attacking-and-securing-apis-15133\" target=\"_blank\"><span style=\"vertical-align: inherit\">Black Hat<\/span><\/a><\/li>\n<li><span style=\"vertical-align: inherit\">Lecturer: <\/span><a href=\"https:\/\/downloadlynet.ir\/tag\/mohammed-aldoub\/\"><span style=\"vertical-align: inherit\">Mohammed Aldoub<\/span><\/a><\/li>\n<li><span style=\"vertical-align: inherit\">Training level: beginner to advanced<\/span><\/li>\n<li><span style=\"vertical-align: inherit\">Training duration: more than 10 hours<\/span><\/li>\n<\/ul>\n<h3><span style=\"vertical-align: inherit\">Course headings<\/span><\/h3>\n<p dir=\"ltr\" style=\"text-align: left\">Day 1:<\/p>\n<ul dir=\"ltr\" style=\"text-align: left\">\n<li>Introduction to the modern web<\/li>\n<li>Security Architecture for APIs<\/li>\n<li>Data and File attacks against APIs and clients<\/li>\n<li>Injection attacks against APIs and clients:<\/li>\n<li>Cache Security<\/li>\n<li>Credential handling and storage<\/li>\n<\/ul>\n<p dir=\"ltr\" style=\"text-align: left\">Day 2:<\/p>\n<ul dir=\"ltr\">\n<li style=\"text-align: left\">HTTP Security<\/li>\n<li style=\"text-align: left\">Token Security<\/li>\n<li style=\"text-align: left\">Authentication and authorization in APIs<\/li>\n<li style=\"text-align: left\">Cryptography<\/li>\n<li style=\"text-align: left\">Securing Development Environments<\/li>\n<\/ul>\n<h3><span style=\"vertical-align: inherit\">Images of the ATTACKING AND SECURING APIS course<\/span><\/h3>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-907357 size-full\" src=\"https:\/\/downloadly.ir\/wp-content\/uploads\/2024\/06\/ATTACKING-AND-SECURING-APIS2.jpg\" alt=\"ATTACKING AND SECURING APIS\" width=\"687\" height=\"142\"><\/p>\n<h3><span style=\"vertical-align: inherit\">Sample video of the course<\/span><\/h3>\n<div style=\"width: 640px;\" class=\"wp-video\"><span class=\"mejs-offscreen\">Video Player<\/span><\/p>\n<div id=\"mep_0\" class=\"mejs-container mejs-container-keyboard-inactive wp-video-shortcode mejs-video\" tabindex=\"0\" role=\"application\" aria-label=\"Video Player\" style=\"width: 640px; height: 360px; min-width: 217px;\">\n<div class=\"mejs-inner\">\n<div class=\"mejs-mediaelement\"><mediaelementwrapper id=\"video-128796-1\"><video class=\"wp-video-shortcode\" id=\"video-128796-1_html5\" width=\"640\" height=\"360\" preload=\"metadata\" src=\"https:\/\/dl.downloadly.ir\/Files\/Elearning\/Sample\/ATTACKING_AND_SECURING_APIS_Downloadly.ir.mp4?_=1\" style=\"width: 640px; height: 360px;\"><source type=\"video\/mp4\" src=\"https:\/\/dl.downloadly.ir\/Files\/Elearning\/Sample\/ATTACKING_AND_SECURING_APIS_Downloadly.ir.mp4?_=1\"><a href=\"https:\/\/dl.downloadly.ir\/Files\/Elearning\/Sample\/ATTACKING_AND_SECURING_APIS_Downloadly.ir.mp4?nocache=1786099489570\">https:\/\/dl.downloadly.ir\/Files\/Elearning\/Sample\/ATTACKING_AND_SECURING_APIS_Downloadly.ir.mp4<\/a><\/video><\/mediaelementwrapper><\/div>\n<div class=\"mejs-layers\">\n<div class=\"mejs-poster mejs-layer\" style=\"display: none; width: 100%; height: 100%;\"><\/div>\n<div class=\"mejs-overlay mejs-layer\" style=\"display: none; width: 100%; height: 100%;\">\n<div class=\"mejs-overlay-loading\"><span class=\"mejs-overlay-loading-bg-img\"><\/span><\/div>\n<\/div>\n<div class=\"mejs-overlay mejs-layer\" style=\"display: none; width: 100%; height: 100%;\">\n<div class=\"mejs-overlay-error\"><\/div>\n<\/div>\n<div class=\"mejs-overlay mejs-layer mejs-overlay-play\" style=\"width: 100%; height: 100%;\">\n<div class=\"mejs-overlay-button\" role=\"button\" tabindex=\"0\" aria-label=\"Play\" aria-pressed=\"false\"><\/div>\n<\/div>\n<\/div>\n<div class=\"mejs-controls\">\n<div class=\"mejs-button mejs-playpause-button mejs-play\"><button type=\"button\" aria-controls=\"mep_0\" title=\"Play\" aria-label=\"Play\" tabindex=\"0\"><\/button><\/div>\n<div class=\"mejs-time mejs-currenttime-container\" role=\"timer\" aria-live=\"off\"><span class=\"mejs-currenttime\">00:00<\/span><\/div>\n<div class=\"mejs-time-rail\"><span class=\"mejs-time-total mejs-time-slider\" role=\"slider\" tabindex=\"0\" aria-label=\"Time Slider\" aria-valuemin=\"0\" aria-valuemax=\"0\" aria-valuenow=\"0\" aria-valuetext=\"00:00\"><span class=\"mejs-time-buffering\" style=\"display: none;\"><\/span><span class=\"mejs-time-loaded\"><\/span><span class=\"mejs-time-current\"><\/span><span class=\"mejs-time-hovered no-hover\"><\/span><span class=\"mejs-time-handle\"><span class=\"mejs-time-handle-content\"><\/span><\/span><span class=\"mejs-time-float\"><span class=\"mejs-time-float-current\">00:00<\/span><span class=\"mejs-time-float-corner\"><\/span><\/span><\/span><\/div>\n<div class=\"mejs-time mejs-duration-container\"><span class=\"mejs-duration\">00:00<\/span><\/div>\n<div class=\"mejs-button mejs-volume-button mejs-mute\"><button type=\"button\" aria-controls=\"mep_0\" title=\"Mute\" aria-label=\"Mute\" tabindex=\"0\"><\/button><a href=\"javascript:void(0);\" class=\"mejs-volume-slider\" aria-label=\"Volume Slider\" aria-valuemin=\"0\" aria-valuemax=\"100\" role=\"slider\" aria-orientation=\"vertical\"><span class=\"mejs-offscreen\">Use Up\/Down Arrow keys to increase or decrease volume.<\/span><\/p>\n<div class=\"mejs-volume-total\">\n<div class=\"mejs-volume-current\" style=\"bottom: 0px; height: 100%;\"><\/div>\n<div class=\"mejs-volume-handle\" style=\"bottom: 100%; margin-bottom: -3px;\"><\/div>\n<\/div>\n<p><\/a><\/div>\n<div class=\"mejs-button mejs-fullscreen-button\"><button type=\"button\" aria-controls=\"mep_0\" title=\"Fullscreen\" aria-label=\"Fullscreen\" tabindex=\"0\"><\/button><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div>\n<h3><span style=\"vertical-align: inherit\">Installation guide<\/span><\/h3>\n<p><span style=\"vertical-align: inherit\">After Extract, view with your favorite Player.<\/span><\/p>\n<p><span style=\"vertical-align: inherit\">Subtitle: None<\/span><\/p>\n<p><span style=\"vertical-align: inherit\">Quality: 720p<\/span><\/p>\n<\/div>\n<h3><span style=\"vertical-align: inherit\">download link<\/span><\/h3>\n<p><a href=\"https:\/\/dl3.downloadly.ir\/Files\/Elearning\/Black_Hat_ATTACKING_AND_SECURING_APIS_2021-8.part1_Downloadly.ir.rar?nocache=1786099488\"><span style=\"vertical-align: inherit\">Download part 1 \u2013 2 GB<\/span><\/a><\/p>\n<p><a href=\"https:\/\/dl3.downloadly.ir\/Files\/Elearning\/Black_Hat_ATTACKING_AND_SECURING_APIS_2021-8.part2_Downloadly.ir.rar?nocache=1786099488\"><span style=\"vertical-align: inherit\">Download part 2 \u2013 2 GB<\/span><\/a><\/p>\n<p><a href=\"https:\/\/dl3.downloadly.ir\/Files\/Elearning\/Black_Hat_ATTACKING_AND_SECURING_APIS_2021-8.part3_Downloadly.ir.rar?nocache=1786099488\"><span style=\"vertical-align: inherit\">Download part 3 \u2013 2 GB<\/span><\/a><\/p>\n<p><a href=\"https:\/\/dl3.downloadly.ir\/Files\/Elearning\/Black_Hat_ATTACKING_AND_SECURING_APIS_2021-8.part4_Downloadly.ir.rar?nocache=1786099488\"><span style=\"vertical-align: inherit\">Download part 4 \u2013 2 GB<\/span><\/a><\/p>\n<p><a href=\"https:\/\/dl3.downloadly.ir\/Files\/Elearning\/Black_Hat_ATTACKING_AND_SECURING_APIS_2021-8.part5_Downloadly.ir.rar?nocache=1786099488\"><span style=\"vertical-align: inherit\">Download part 5 \u2013 1.97 GB<\/span><\/a><\/p>\n<p><span style=\"vertical-align: inherit\">File(s) password: www.downloadly.ir<\/span><\/p>\n<p><span style=\"vertical-align: inherit\">[ad id=\u201911306\u2032]<\/span><\/p>\n<h3><span style=\"vertical-align: inherit\">Size<\/span><\/h3>\n<p><span style=\"vertical-align: inherit\">9.9 GB<\/span><\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Description ATTACKING AND SECURING APIS course. This intensive, hands-on training course focuses on security and attacks against API-based websites and cloud in<\/p>\n","protected":false},"author":1,"template":"","dgi_category":[10458],"dgi_tag":[42495,42496,42497,42498,42499,42500],"class_list":["post-3786","digital_item","type-digital_item","status-publish","has-post-thumbnail","hentry","dgi_category-video-tutorials","dgi_tag-course-attacking-and-securing-apis","dgi_tag-download-attacking-and-securing-apis","dgi_tag-download-links-attacking-and-securing-apis","dgi_tag-free-attacking-and-securing-apis","dgi_tag-free-download-attacking-and-securing-apis","dgi_tag-mohammed-aldoub"],"_links":{"self":[{"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/digital_item\/3786","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/digital_item"}],"about":[{"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/types\/digital_item"}],"author":[{"embeddable":true,"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":0,"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/digital_item\/3786\/revisions"}],"wp:attachment":[{"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/media?parent=3786"}],"wp:term":[{"taxonomy":"dgi_category","embeddable":true,"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/dgi_category?post=3786"},{"taxonomy":"dgi_tag","embeddable":true,"href":"https:\/\/nokobox.com\/index.php\/wp-json\/wp\/v2\/dgi_tag?post=3786"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}