(On-line) Cherrybomb – API security tests in the CI pipeline

Guy Levinger: Cherrybomb – API security tests in the CI pipeline

• Concepts of OpenAPI specifications, and show how important and easy to generate they are.
• API security testing in the CI pipeline, and present Cherrybomb and its capabilities.
• Demo time! We'll demonstrate Cherrybomb on a live API to find a set of vulnerabilities.

Guy Levinger is the CTO of BLST security, the publisher of Cherrybomb. He previously served as a tech lead in the IDF. Previously, he worked as a freelance penetration tester and core developer for various companies.

Agenda:
5:00 - Socializing/connecting
5:10 - OWASP announcements
5:15 - Presentation