Thinking like an attacker
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
see the Shop API the way someone who wants to abuse it sees it.
Planned topics
- Attackers want something: data, money, free service, or to break things.
- They look for the cheapest way in, not the cleverest.
- Every input the API accepts (URL, header, body, token) is a place to try something odd.
- Most real breaches use simple mistakes, such as a missing check, not movie-style hacking.
- Ask of every feature: "What if someone sends something I did not expect?"
Draft outline details
Demonstration
a list of goals for Shop: read other customers' orders, get a discount, take the site down, steal accounts.
Check your understanding
Do most attacks need advanced skills?
Show answer
No. Most use simple, common mistakes.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.