Question

Application programming interfaces ( APIs) are a way for programs to communicate with each other, and they power a wide variety of applications. As applications become more complex, developers are increasingly using APIs to combine components of an application or multiple applications belonging to the same organization. And more and more, APIs have the ability to execute important actions or communicate sensitive information.

应用程序接口（API）是程序之间通信的一种方式，可以为各种应用程序提供支持。随着应用程序变得越来越复杂，开发人员越来越多地使用 API 来组合应用程序的组件或同一组织中的多个应用程序。而且，API 越来越具有执行重要操作或通信敏感信息的能力。

In this chapter, we’ll talk about what APIs are, how they work, and how you can find and exploit API vulnerabilities.

在这一章中，我们将讨论 API 是什么，它们如何工作以及您如何找到并利用 API 漏洞。