> For the complete documentation index, see [llms.txt](https://sallam.gitbook.io/sec-88/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sallam.gitbook.io/sec-88/api-sec.md).

# API-Sec

If you enjoy what I do, please support me  Buy Me Ko-fi! https\://ko-fi.com/h0tak88r

## Resources:

* Top 6 Api [https://www.youtube.com/watch?v=4vLxWqE94l4](https://www.youtube.com/watch?v=4vLxWqE94l4**)
* What Is REST API? [https://www.youtube.com/watch?v=-mN3VyJuCjM](https://www.youtube.com/watch?v=-mN3VyJuCjM**)
* **OWASP API Security** <https://owasp.org/www-project-api-security/>
* **API Security Fundamentals** <https://university.apisec.ai/products/api-security-fundamentals>
* What Is Single Sign-on (SSO)? [https://www.youtube.com/watch?v=O1cRJWYF-g4](https://www.youtube.com/watch?v=O1cRJWYF-g4**)
* [https://portswigger.net/web-security/api-testing](https://portswigger.net/web-security/api-testing**)
* [https://portswigger.net/web-security/graphql](https://portswigger.net/web-security/graphql**)
* <https://danaepp.com/blog>
* <https://apihacker.blog/>
* **OWASP API TOP 10** <https://xmind.works/gJnF6CP1>
  * [The Web Security Academy](https://portswigger.net/web-security): One of the best free online web security training courses on the Internet.
  * [APIsecurity.io](https://apisecurity.io/): A weekly newsletter that is a great resource for the latest and greatest API security news.
  * [API Hacking Mind Map](https://dsopas.github.io/MindAPI/) by David Sopas.
  * Get involved in the Bug Bounty communities:
    * [Synack](https://www.synack.com/)
    * [BugCrowd](https://www.bugcrowd.com/bug-bounty-list/)
    * [HackerOne](https://www.hackerone.com/)
    * [Intigriti](https://www.intigriti.com/)
  * [Insider PhD Everything API Hacking](https://www.youtube.com/playlist?list=PLbyncTkpno5HqX1h2MnV6Qt4wvTb8Mpol): Katie Paxton-Fear's playlist of all those great API hacking hits.
  * [Awesome API Security](https://github.com/arainho/awesome-api-security): All the API security things.