Author: Dana Epp
-
Writing Burp Bambda Filters Like a Boss
Learn how to write your own Bambda filters in Burp Suite to do complex filtering of your proxy HTTP history.
-
Using Chaos Engineering To Hack An API
Learn how to use chaos engineering to break an API on purpose to find new types of vulnerabilities that you don’t normally find in testing.
-
Uncovering Elusive API Targets via VHOST Discovery
Learn how to uncover elusive dev, test, and production instances of an API hidden behind virtual hosting through VHOST discovery.
-
Bypassing API rate limiting using IP rotation in Burp Suite
Learn how to bypass API rate limiting security controls using IP rotation in Burp Suite via Amazon API Gateway.
-
5 ways to improve your GraphQL hacking skills
Explore five ways that you can improve your GraphQL hacking skills, and learn how to practice your newly found skills in a safe way.
-
API Recon Tip: Using AI to “Eyeball” your targets
Learn how to use the AI in Eyeballer from BishopFox to help identify interesting targets during recon of your web apps & APIs.
-
Adversarial Thinking for Bug Hunters
Learn how to use adversarial thinking with OWASP and MITRE to better approach security testing of your web apps and APIs.
-
Proving API exploitability with Burp Collaborator
Learn how to prove API exploitability through the use of the Burp Collaborator for out-of-band application security testing (OAST).
-
What API hackers need to know about the Exploit Prediction Scoring System
Learn how to leverage the Exploit Prediction Scoring System (EPSS) to identify the vulnerabilities in your APIs that are most exploitable.
-
The Art of Using Mind Maps to Improve Your API Hacking
Learn how to create mind maps that can help you improve your API hacking methodology during security testing and pentest engagements.