APISEC CON OSINT meets API, Uncovering Hidden Data Behind Sites, Mishaal Kahn

OSINT meets API, Uncovering Hidden Data Behind Sites, Mishaal Kahn What if you could uncover hidden APIs, extract sensitive data, and track targets, all without writing a single exploit? In this mind-blowing session, Mishaal, author of The Phantom CISO, pulls back the curtain on API-fueled OSINT tactics that ethical hackers, AppSec pros, and red teamers can't afford to miss. Learn how APIs are quietly leaking: *Developer email addresses from GitHub *Vehicle data from license plate searches *Identity breadcrumbs from payment platforms Discover how to: *Use APIs directly to bypass UIs *Leverage tools like Postman, curl, and Cato for automation *Investigate using only legal, free, public APIs *Avoid tipping off your targets during investigations This talk delivers high-signal, hands-on techniques to level up your recon game and better understand how your APIs can be abused, before the bad guys do. 👇 Don’t forget to: 👍 Like | 💬 Comment | 🔔 Subscribe 📘 Follow Mishaal at https://phantomciso.com #APIHacking #OSINT #APISecurity #DevSecOps #EthicalHacking #ReconTools #AppSec #RedTeam #Cybersecurity #PhantomCISO