Dana Epp's Blog
Security (de)engineering for fun and profit
Learn how to use cURL in your exploits and demonstrate impact to the API vulnerabilities you find.
How to use OWASP guidance as your API security testing blueprint.
How to get started with web API security testing.