Fundamentals

APIs & Modern Web Apps

Most vulnerabilities today live in APIs, not web pages. Learn how REST APIs and GraphQL work, how they're authenticated, and what to look for when testing them.

Beginner35 min6 lessons1 hands-on

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Understand REST API design and how to interact with JSON endpoints
✓Read API documentation and map all exposed routes
✓Identify the difference between REST and GraphQL attack surfaces
✓Use curl and browser DevTools to probe API responses manually

Lessons

1What Is an API?
2REST APIs — Structure and Attack Surface
3API Authentication — Keys, JWTs, and What Breaks
4GraphQL — The Modern API Alternative
5Your Turn: Call the APIHANDS-ON
6Final Lab — API Recon & Core Concepts

Start free →