Membership

Purple Teaming in Java API Development (W41)

Secure a Java Spring Boot API through development and adversarial testing. Build a REST API, examine sessions and microservices, and use tools such as Postman, ZAP, and an intercepting proxy to investigate weaknesses including IDOR.

Instructor · Mithun Smith Dias

Modules:
4
Lessons:
56

PentestMag learning

Practical skills.
Verified progress.

What you'll learn

  • Build and test a Spring Boot REST API.
  • Investigate session handling and API authorization.
  • Use Postman, ZAP, and an intercepting proxy.
  • Identify and explain API security weaknesses such as IDOR.

Prerequisites

Basic Java and web API development experience is helpful. The course includes setup and Spring Boot material.

Module 2

Module 1

  1. 1. (W41M02) JAVA Spring Boot Features

  2. 2. (W41M03) Microservices - Introduction

  3. 3. (W41M03) Developing a Spring Boot-based REST API Part 1

  4. 4. (W41M04) Developing a Spring Boot-based REST API Part 2

  5. 5. (W41M07) Enabling Session Time-Out

  6. 6. (W41M08) Intercepting Proxy Tool

  7. 7. (W41M09) Postman Part 1

  8. 8. (W41M10) Postman Part 2

  9. 9. (W41M11) ZAP

  10. 10. (W41M12) IDOR

  11. 11. (W41M13) Configuring Foxy Proxy and ZAP

  12. 12. (W41M14 Code Snippet Walkthrough

  13. 13. (W41M15) Cloning a Project from GIT

Assessments

Assignment Required

(W41A01) Module 1 Exercises

Module 3

Module 2

  1. 1. (W41M17) Identifying Issues with Deserialization Part 1

  2. 2. (W41M18) Identifying Issues with Deserialization Part 2

  3. 3. (W41M19) Identifying Issues with Deserialization Part 3

  4. 4. (W41M20) Identifying Issues with Deserialization Part 4

  5. 5. (W41M21) Identifying Issues with Deserialization Part 5

  6. 6. (W41M22) Identifying Issues with Deserialization Part 6

  7. 7. (W41M23) Identifying Issues with Deserialization Part 7

  8. 8. (W41M24) Identifying Issues with Deserialization Part 8

  9. 9. (W41M25) Exploiting Issues with Deserialization Part 9

  10. 10. (W41M26) Exploiting Issues with Deserialization Part 10

  11. 11. (W41M27) Exploiting Issues with Deserialization Part 11

  12. 12. (W41M29) Introduction To Authentication In Spring Boot

  13. 13. (W41M28) Exploiting Issues with Deserialization Part 12

  14. 14. (W41M30) Authentication and BCrypt Hashing

  15. 15. (W41M31) Custom Extensions on ZAP Part 1

  16. 16. (W41M32) Custom Extensions on ZAP Part 2

  17. 17. (W41M33) Custom Extensions on ZAP Part 3

  18. 18. (W41M34) Custom Extensions on ZAP Part 4

  19. 19. (W41M35) Custom Extensions on ZAP Part 5

  20. 20. (W41M36) Regular Expression Part 1

  21. 21. (W41M37) Regular Expression Part 2

  22. 22. (W41M38) Regular Expression Part 3

  23. 23. (W41M39) HTTPS Connection Part 1

  24. 24. (W41M40) HTTPS Connection Part 2

Assessments

Assignment Required

(W41A02) Module 2 Exercise

Module 4

Module 3

  1. 1. (W41M42) Module 3 Introduction

  2. 2. (W41M43) Spring Security Part 1

  3. 3. (W41M44) Spring Security Part 2

  4. 4. (W41M45) Authorization Part 1

  5. 5. (W41M46) Authorization Part 2

  6. 6. (W41M47) Authorization Part 3

  7. 7. (W41M48) Authorization Part 4

  8. 8. (W41M49) Authorization Part 5

  9. 9. (W41M50) Endpoints Part 1

  10. 10. (W41M51) Endpoints Part 2

  11. 11. (W41M52) CVSS Part 1

  12. 12. (W41M53) CVSS Part 2

  13. 13. (W41M54) Active scan Part 1

  14. 14. (W41M55) Active Scan Part 2

  15. 15. (W41M56) Active Scan Part 3

  16. 16. (W41M57) Active Scan Part 4

  17. 17. (W41M58) Future areas

Assessments

Assignment Required

(W41A03) Module 3 Assignments

Module 5

Final Exam

Lessons will appear here after course content is added.

Assessments

Assignment Required

(W41A04) Final Exam

Course access

Unlock Purple Teaming in Java API Development (W41).

$9 for 3 days then $90/month

Enter your email. We’ll send a sign-in code here without taking you away from this course.