Public credential record
Verified credential
Credential awarded to
Chaiyapon Sowanna
Certified API Penetration Testing Apprentice
Earn this credential
Credential details
-
Certificate ID
-
KSA-ZSFP4YBM2507
-
Issued on
- July 25, 2026
-
Exam version
- 1.0
-
Result
- Passed
Candidates must achieve at least
75%
to earn this credential.
Exam topic breakdown
5
areas
- Endpoint discovery
- Hidden API functionality identification
- Request, response, and parameter analysis
- Client-side source review for API discovery
Authentication Security Weakness
15%
- API authentication mechanisms
- JWT structure and validation
- Token misuse and forgery assessment
Authorization Assessment
25%
- Vertical authorization flaws
- Unauthorized access to restricted operations
Input Validation and Injection
15%
- Input validation weaknesses
- XML security issues
- Injection through unsafe parser behavior
- Legacy API input-processing weaknesses
Business Logic and Data Integrity
20%
- Object property tampering
- Unauthorized state changes
- Application logic abuse