Practical DevSecOps
Exploiting Hidden Endpoints and Centralizing Defense with Kong - Your API Documentation is a Lie
20:42
Is your API documentation telling the truth? In this episode, we dive into the uncomfortable reality that API documentation is often a "lie" because of the gap between Swagger files and what is actually running in production. We explore how attackers exploit this gap using advanced fuzzing techniques and JWT manipulation, and why a centralised defense strategy using Kong API Gateway is the only…