Skip to content

Commit

Permalink
Update document/4-Web_Application_Security_Testing/12-API_Testing/01-…
Browse files Browse the repository at this point in the history
…API_Reconnaissance.md
  • Loading branch information
kingthorin authored Aug 7, 2024
1 parent 1266bbb commit e6295f3
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -109,7 +109,7 @@ Wordlists are helpful here for a comprehensive list of common words used in APIs

### Look Back, Way Back

Published and private APIs change over time. But deprecated or older version may still be operational either on purpose or by misconfiguration. These should also be tested as there is a good chance that they will contain vulnerabilities that newer versions have fixed. In addition, changes to APIs show newer features which may be less robust and therefore a good candidate for testing.
In general APIs change over time. But deprecated or older version may still be operational either on purpose or by misconfiguration. These should also be tested as there is a good chance that they will contain vulnerabilities that newer versions have fixed. In addition, changes to APIs show newer features which may be less robust and therefore a good candidate for testing.

To discover older version we can use the `Wayback machine` to help find older endpoints. A helpful tool know as TomNomNom's [WayBackUrls](https://github.com/tomnomnom/waybackurls) fetches all the URLs that the Wayback Machine knows about for a domain.

Expand Down

0 comments on commit e6295f3

Please sign in to comment.