Testing and Hacking APIs INON SHKEDY

OWASP Global AppSec Tel Aviv https://telaviv.appsecglobal.org/ Most of the modern applications that have been developed in the last years deeply rely on APIs, including web, mobile and IOT apps. APIs are different than traditional web servers in many ways. This change might be confusing and challenging for pentesters and security researches. Come to learn how to leverage the new battleground to your advantage and: 1. Understand the underlying implementation of the application from the API traffic 2. Detect potential vulnerable points in APIs 3. Perform a successful and effective pen test in modern applications Inon Shkedy Head of Research, Salt Security The speaker has 7 years of experience in application security. He started his career in a red team in a government organization for 5 years, and then moved to the Silicon Valley to learn more about startups, modern applications and APIs. - Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP...