> For the complete documentation index, see [llms.txt](https://blog.syselement.com/home/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.syselement.com/home/cyber-everything/web/api/api-pentesting.md).

# API Penetration Testing

![apisecuniversity.com - © APIsec.ai](/files/UkGc49dP4NfNGkg5Bm6U)

🔗 [API Penetration Testing - APIsec University](https://university.apisec.ai/products/api-penetration-testing)

* Instructor - **Corey Ball**
* Course Duration - `12h`

***

## 🌐 Resources 🔗

> * [OWASP API Security Top 10](https://owasp.org/API-Security/editions/2023/en/0x00-header/)
> * [OWASP API Security Top 10 Vulnerabilities - APIsecurity.io](https://apisecurity.io/owasp-api-security-top-10/)
> * [API Security Empire (Recon & Attack Mindmaps)](https://github.com/Cyber-Guy1/API-SecurityEmpire#%EF%B8%8F-api-security-empire)
> * [HackTricks - Web API Pentesting](https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/web-api-pentesting)
> * [awesome-api-security-essentials](https://github.com/JBAhire/awesome-api-security-essentials)
>
> **Vulnerable API Labs**
>
> * <https://github.com/InsiderPhD/Generic-University>
> * <https://github.com/roottusk/vapi>
> * <https://github.com/erev0s/VAmPI>

***