API Reconnaissance
25%- Endpoint discovery
- Hidden API functionality identification
- Request, response, and parameter analysis
- Client-side source review for API discovery
Issued by
Knight Squad Academy
This badge is awarded to
Kritsada Wiriya
Certified API Penetration Testing Apprentice
Earn this badge- Certificate ID
KSA-HFTYDG7S1504- Issued on
- April 15, 2026
- Exam version
- 1.0
- Result
- Passed
Earning criteria
Candidates must achieve at least 75% to earn this badge.
Exam topic breakdown
Authentication Security Weakness
15%- API authentication mechanisms
- JWT structure and validation
- Token misuse and forgery assessment
Authorization Assessment
25%- Vertical authorization flaws
- Unauthorized access to restricted operations
Input Validation and Injection
15%- Input validation weaknesses
- XML security issues
- Injection through unsafe parser behavior
- Legacy API input-processing weaknesses
Business Logic and Data Integrity
20%- Object property tampering
- Unauthorized state changes
- Application logic abuse
| Area | Percent |
|---|---|
| API Reconnaissance | 25% |
| Authentication Security Weakness | 15% |
| Authorization Assessment | 25% |
| Input Validation and Injection | 15% |
| Business Logic and Data Integrity | 20% |