API Badge

• This exercise is the API version of an exercise you already solved in the Essential Badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
• Completed by 493 students
• Takes Less than an hour on average
• Rails/Angular
• API

• This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
• Completed by 308 students
• Takes Less than an hour on average
• Rails/Angular
• API

• This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
• Completed by 96 students
• Takes Less than an hour on average
• Rails/Angular
• API

• This exercise covers how one can inspect JavaScript code to identify unused endpoints.
• Completed by 100 students
• Takes Less than an hour on average
• Rails/Angular
• API, Angular

• This exercise covers how one can inspect JavaScript code to identify unused endpoints.
• Completed by 90 students
• Takes Less than an hour on average
• Rails/Angular
• API, Angular

API Payments 01

• This exercise covers a simple payments bypass.
• Takes -- on average
• Rails/Angular
• API

• This exercise covers how one can inspect JavaScript code to identify unused endpoints.
• Completed by 46 students
• Takes Less than an hour on average
• Rails/Angular
• API, Angular

• This exercise covers how one can inspect JavaScript code to identify information leak.
• Completed by 2 students
• Takes -- on average
• Rails/Angular
• API, Angular

API 08

• This exercise covers how one can inspect HTTP responses to identify information leaks.
• Takes -- on average
• Rails/Angular

API 09

• This exercise covers how one can inspect HTTP responses to identify information leaks.
• Takes -- on average
• Rails/Angular

API Mobile 01

• This exercise covers how you can intercept traffic from a mobile application and uses this to gain access to sensitive information.
• Takes -- on average
• Node/React Native