Skip to content
R&D

CAPIE — Full Course Slides (223 slides)

Full text extracted from CAPIE - slides-Master - 002.pptx (223 slides, TheXSSRat). Use this as the syllabus reference; hands-on labs are in the course itself.

1.0 Introduction to APIs

Section titled “1.0 Introduction to APIs”

Slide 2 — 1.0 Introduction to APIs

Slide 3 — 1.1 What is API ?

Slide 4

    1. Introduction to apiS
  • Definition:
  • Application Programming Interface
  • sometimes apps need to communicate
  • Can be on different levels - OS, web …
  • We will focus on web APIs
  • The importance of APIs in today’s digital age

Slide 5

  • 2. Types of api
  • Web APIs (e.g. REST, SOAP, GraphQL).
  • Database APIs
  • Operating system APIs
  • Library & Framework APIs

Slide 6

  • 3. How apis work
  • Request & Response Model.
  • HTTP Methods (GET, POST, PUT, DELETE).
  • Status Codes.

Slide 7

  • 4. Api components
  • Endpoints
  • Parameters
  • Headers
  • Payload/Body.

Slide 8

  • 5. AUTHENTICATION & AUTHORIZATION
  • API Keys.
  • OAuth.
  • JWT (JSON Web Tokens).
  • Basic Authentication.

Slide 9

  • 6. Common use cases of apis
  • Integration between software applications.
  • Mobile apps fetching data.
  • Web apps interacting with backend servers.
  • Third-party integrations.

Slide 10

  • 7. Benefits of using apis
  • Scalability.
  • Modularity.
  • Time-saving.
  • Integration capabilities.

Slide 11

  • 8. Potential risks
  • Brief introduction to why API security is crucial (this will set the stage for subsequent lessons in pentesting).

Slide 12

Slide 13

  • 10. Conclusion & what’s next
  • A recap of the important & function of APIs.
  • A teaser for the next lesson, which will likely delve deeper into security aspects.

1.2 SOAP vs REST

Section titled “1.2 SOAP vs REST”

Slide 15 — 1.2 SOAP vs REST APIs

Slide 16

    1. Introduction to soap & rest
  • Brief overview of both.
  • Historical context: Why & when they were developed.

Slide 17

  • 2. SOAP simple object access protocol
  • Definition & primary function.
  • XML-based message protocol.
  • Protocol independence (can be used over smtp,ftp,http, etc).
  • Built-in error handling
  • Stateful operations.

Slide 18

  • 2.1 SOAP request example
  • 2.1 SOAP request example
  • Request:
  • POST /InStock HTTP/1.1
  • HOST www.example.org
  • Content- Type: application/soap+xml; charset=utf-8
  • Content-Length: nnn

Slide 19