Learn how to security test REST APIs against OWASP API Top 10 using OpenAPI specification as the start point.

API security testing is hard most DAST tools focus on basic testing around SQLi, NoSQL, XSS, etc. areas. This session will take a deep dive into most attacked API vectors including authentication flaws, logic flaws, and optionally Log4j vulnerability testing.

This session is for developers, and AppSec leads who are looking to take a deep dive approach to API security. I'll be covering slides and a live demonstration for some of the key areas.