RedTeam
3.Web-Hacking
5.Others
API
Notes
Type-of-API-and-Privacy
2.restful

Commands

POST /posts/          ---> Create

GET /posts/1          ---> Read

POST /post/1          ---> Update
PUT /post/1           ---> Update
POST /post/1/edit     ---> Update

DELETE /post/1         ---> Delete
POST /post/1/delete    ---> Delete

More information

RESTful APIs are really easy to spot

  • They have a defined structure which relates to CRUD funcitonality

You can easy predict new endpoints simply by knowing an application

  • Eg: If YouTube’s API has something like GET /video/1
  • You can assume DELETE /video/1 also exists
  • And that if YouTube has videos maybe GET /comment/1 exists for comments

They are widely used, however some of the endpoints may be more custom

  • EgDELETE /posts/1 vs POST /posts/1/delete

They usually return JSON

  • You can get a Burp plugin to automatically visualise JSON (JSONBeautifier)
1.type and Privacy3.GraphQL