Learning the key skills of API attacking

The best way to learn how to hack APIs is by getting hands-on experience with hacking tools and a vulnerable API. We will start by building our own API hacking laboratory using many of the popular tools we have explored, and then use this laboratory to attack some deliberately vulnerable API-based applications. This hands-on approach will equip you with the skills necessary to attack real-world APIs in the upcoming chapters.

Building a laboratory

The choice of a personal laboratory is somewhat dependent on individual preferences for OSs and favored tools. For most users, I would recommend three core components: a versatile modern editor (such as Visual Studio Code), a container runtime environment (such as Docker), and the ubiquitous Kali Linux hacking OS.

Visual Studio Code

The choice of a code editor and/or integrated development environment (IDE) is a deeply personal one (as anyone who remembers the vi versus emacs debates of...