Blog - Page 8 of 13 - Dana Epp's Blog

How to use Common Attack Patterns to improve your API security testing methodology.

Learn how to leverage CeWL to generate custom word lists from release notes, changelogs, and product roadmaps for use in API discovery.

Level up your API security testing skills by learning how to use Gron to grep through the JSON payloads of the API endpoints you are hacking.

Learn how to look for those old forgotten zombie APIs that can be a goldmine of vulnerabilities and security loopholes.

Learn how you can make more money in less time on a consistent basis by focusing on API pentesting rather than bug bounty hunting.

Learn how to find vulnerabilities in multi-tenant apps and APIs that expose cross-tenant data leaks (CTDL) during your security testing.

Gain the necessary knowledge and skills you need to find your first security vulnerability in the APIs you are testing.

Discover ways to modify API requests during testing to corrupt data and manipulate code flow, allowing you to uncover new vulnerabilities.

Learn how to avoid conflict when you approach a company and report a vulnerability you found as a security researcher.

Learn how to find and extract sensitive secrets and source code to APIs hidden within the layers of Docker container images.