Category: API Hacking Mindset
-
Why you should stay “professionally detached” from the vulns you find
Learn how to stay professionally detached from the vulnerabilities you discover and disclose as part of your security research.
-
Why Shadow APIs provide a defenseless path for threat actors
Learn why shadow APIs sometimes provide a defenseless path for threat actors, and learn what YOU can do about it.
-
Weaponizing API discovery metadata
Learn how to weaponize API discovery metadata to improve your recon of the APIs you are hacking or conducting security testing on.
-
7 Deadly Sins of API Security Testing
Explore the misconceptions and anti-patterns of applying security testing to APIs, and how to address them.
-
Why HAST is important to API hackers
Learn why Human Application Security Testing (HAST) is important to API hackers.
-
Guts & Greed: How Bug Hunter Arrogance and Apathy Hurts Us All
Explore why bug hunters should be more patient as vendors try to improve their application security maturity from a VDP to a BBP.
-
5 Tips for API Hackers on Picking Your First Target
Check out these five tips to help you pick your first target when starting bug bounty hunting against APIs.
-
5 mistakes beginners make during app recon
Learn about the five mistakes beginners make during their app recon that limit their ability to find vulns during their API security testing.
-
Beyond the Crystal Ball: What API security may look like in 2024
No soothsayer can predict what the threat landscape may look like in 2024. But check out these predictions of what API security may look like.
-
That time I broke into an API and became a billionaire
Read an intriguing real world story about how tainted data and API abuse can lead to the perfect digital bank heist.