Blog - Page 9 of 13 - Dana Epp's Blog

Discover how to use GNU Privacy Guard (GPG) to communicate with security triage teams as a security researcher.

Check out this article to learn how to find and exploit server-side request forgery (SSRF) vulnerabilities in an API.

Learn how to assess the real costs for application security assessments that include proper penetration testing.

We must become curators of API dependencies, NOT consumers!!

Learn why it’s important to include a working exploit in your vulnerability report and how to protect it so others don’t weaponize it.

Learn the ins and outs of offensive AI and how API hackers can benefit from it.

Check out these changes coming to the OWASP API Security Top 10 list!

Learn how to look more offensively at API security testing and apply the concept of common attack pattern enumeration to your checklists.

Learn how to look at your API testing through a security lens to get the best code coverage and approach it with offensive security in mind.

Hack the hardware to find the firmware and swipe the source code of APIs under security testing.