Category: API Hacking Fundamentals
-
Bypassing API rate limiting using IP rotation in Burp Suite
Learn how to bypass API rate limiting security controls using IP rotation in Burp Suite via Amazon API Gateway.
-
5 ways to improve your GraphQL hacking skills
Explore five ways that you can improve your GraphQL hacking skills, and learn how to practice your newly found skills in a safe way.
-
What API hackers need to know about the Exploit Prediction Scoring System
Learn how to leverage the Exploit Prediction Scoring System (EPSS) to identify the vulnerabilities in your APIs that are most exploitable.
-
The Ultimate Guide to Learning Burp Suite for FREE
Check out this curated list of FREE resources you can use to master Burp Suite for web app and API security testing.
-
3 ways to use Common Attack Patterns to abuse an API
How to use Common Attack Patterns to improve your API security testing methodology.
-
A “cewl” way for API discovery
Learn how to leverage CeWL to generate custom word lists from release notes, changelogs, and product roadmaps for use in API discovery.
-
How to get started as an API hacker
Gain the necessary knowledge and skills you need to find your first security vulnerability in the APIs you are testing.
-
The Security Researcher’s Guide to Reporting Vulnerabilities to Vendors
Learn how to avoid conflict when you approach a company and report a vulnerability you found as a security researcher.
-
Why writing API exploits is important when reporting vulnerabilities
Learn why it’s important to include a working exploit in your vulnerability report and how to protect it so others don’t weaponize it.
-
Analyzing Your Existing API Testing Through a Security Lens
Learn how to look at your API testing through a security lens to get the best code coverage and approach it with offensive security in mind.