Overview What You Will Learn Curriculum Instructor

Course Overview

GraphQL is an API query language and runtime for executing those queries. GraphQL allows clients to define the exact data they require thus addressing the over-fetching and under-fetching challenges of the conventional REST APIs. It operates through a single endpoint allowing developers to fetch, modify, and subscribe to data changes immediately. 

The security of APIs gained significant attention recently given the role of the APIs in delivering solutions to the clients. Due to its unique features, the security of GraphQL is even more challenging compared to conventional APIs. Attackers may achieve various objectives from requesting excessive data and attempting to map the API structure to Denial of Service (DOS). In this course, we provide a comprehensive view of GraphQL API security covering a range of topics from foundations to attack identification, exploitation, and protection. We first provide a high-level overview of GraphQL and outline its core features. Next, we discuss how to identify and exploit vulnerabilities. We then practice our learning using hands-on labs. Finally, we discuss how to secure your APIs against such vulnerabilities and deliver more secure APIs to production.  

By the end of the course, you will have a deep understanding of GraphQL and its core features.

What You Will Learn

  • Understand the basics of GraphQL its key features.
  • Understand the core concepts of API security.
  • Learn how to identify vulnerabilities in GraphQL.
  • Learn how to exploit a vulnerability in GraphQL APIs.
  • Learn how to secure your API.

Program Curriculum

  • Introduction
  • GraphQL vs. REST API
  • Find GraphQL Endpoints
  • Chapter 1 Quiz

  • What is API Security?
  • OWASP API Top 10
  • Common Vulnerabilities
  • Chapter 2 Quiz

  • Testing Environment
  • Accessing Private GraphQL Posts
  • Finding a Hidden GraphQL Endpoint
  • Accidental Exposure of Private GraphQL Fields
  • Performing CSRF Exploit Over GraphQL
  • Bypassing GraphQL Brute-force Protections
  • Chapter 3 Quiz

  • How to Secure Your API?
  • Chapter 4 Quiz

  • What We Have Discussed
Load more modules

Instructor

Ali Dorri Dorri

Ali Dorri is a security expert specializing in application security and penetration testing. He holds a PhD in computer science from UNSW, Australia, with his research in the security and privacy of IoT gaining significant attention in academia, amassing over 8,000 citations. Ali combines deep cybersecurity expertise from both academia and industry, with hands-on experience in penetration testing and security research. He holds top industry certifications, including OSCP and CISSP, further solidifying his position as a trusted expert in the field.

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Empower Your Learning with Our Flexible Plans

Invest in your future with our flexible subscription plans. Whether you're just starting out or looking to enhance your expertise, there's a plan tailored to meet your needs. Gain access to in-demand skills and courses for your continuous learning needs.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Ideal for continuous learning, offering video-based learning with 840+ courses and diverse Learning Paths to enhance your skills.

$ 69.00
Billed monthly or $599.00 billed annually
Get Started Now
Start your 7-day trial for $1

What is included

  • 840+ Premium Short Courses
  • 70+ Structured Learning Paths
  • Validation of Completion with all courses and learning paths
  • New Courses added every month
Early Access Offer

Pro +

Experience immersive learning with Practice Labs and CTF Challenges for comprehensive skill-building.

$ 79.00
Billed monthly or $699.00 billed annually
Get Started Now
Start your 7-day trial for $1

Everything in Pro and

  • 1400+ Practice Lab exercises with guided instructions
  • 150+ CTF Challenges with detailed walkthroughs
  • New Practice Labs and Challenges added every month

Related Courses

  • Hacking WEP/WPA/WPA2 Wi-Fi Networks Using Kali Linux 2.

    Hacking WEP/WPA/WPA2 Wi-Fi Networks Using Kali Linux 2

    Short Course

    Hacking WEP/WPA/WPA2 Wi-Fi Networks Using Kali Linux 2

    Vulnerability Assessment and Pentesting

    The comprehensive course to secure & crack WEP/WPA/WPA2 k...

    $69.99

    Intermediate

    5 hr 12 m

  • Bootstrap 4 Quick Website Bootstrap Components Course.

    Bootstrap 4 Quick Website Bootstrap Components Course

    Short Course

    Bootstrap 4 Quick Website Bootstrap Components Course

    Software Development

    Explore the basics of Bootstrap and learn to create a website...

    $49.99

    Beginner

    1 hr 30 m

  • CCNA - Understanding Routers and Switches.

    CCNA - Understanding Routers and Switches

    Short Course

    CCNA - Understanding Routers and Switches

    Security Architecture and Operations

    A comprehensive guide to understanding the in-depth functioni...

    $49.99

    Intermediate

    2 hr 0 m

  • The Complete Full-Stack JavaScript Course.

    The Complete Full-Stack JavaScript Course

    Short Course

    The Complete Full-Stack JavaScript Course

    Software Development

    Learn full-stack web development using JavaScript (ReactJS, N...

    $79.99

    Beginner

    24 hr 17 m

  • React.JS for Ecommerce: Building a Store with React.JS

    React.JS for Ecommerce: Building a Store with React.JS

    Short Course

    React.JS for Ecommerce: Building a Store with React.JS

    DevSecOps

    From React.js Fundamentals to Crafting an Online Storefront

    $49.99

    Advanced

    3 hr 30 m

  • CISSP Certification Domains 5, 6, 7, and 8 Video Training.

    CISSP Certification Domains 5, 6, 7, and 8 Video Training

    Short Course

    CISSP Certification Domains 5, 6, 7, and 8 Video Training

    Cybersecurity

    This course is ideal for individuals who desire to pass the I...

    $69.99

    Intermediate

    6 hr 30 m

  • Helm 3 - Package Manager for Kubernetes.

    Helm 3 - Package Manager for Kubernetes

    Short Course

    Helm 3 - Package Manager for Kubernetes

    Software Development

    A must tool for every DevOps engineer

    $49.99

    Intermediate

    1 hr 27 m

  • Learn Ethical Hacking by Hacking Real Websites Legally.

    Learn Ethical Hacking by Hacking Real Websites Legally

    Short Course

    Learn Ethical Hacking by Hacking Real Websites Legally

    Vulnerability Assessment and Pentesting

    Fun way to learn ethical hacking by playing online hacking ga...

    $69.99

    Beginner

    4 hr 18 m

1 50
View all