Category: API Security Fails
-
Why API Security Testing Matters – Learning from Tracfone
Let’s look at Tracfone’s $16 million settlement with the FCC to understand why API security testing matters.
-
7 Deadly Sins of API Security Testing
Explore the misconceptions and anti-patterns of applying security testing to APIs, and how to address them.
-
5 mistakes beginners make during app recon
Learn about the five mistakes beginners make during their app recon that limit their ability to find vulns during their API security testing.
-
From Tsunami to Twitter: How Rigorous API Testing Can Prevent Critical System Outages During Disasters
Restricting emergency alerts during a disaster due to rate limiting is in itself a disaster. Learn how to look for this during your API testing.
-
That time I broke into an API and became a billionaire
Read an intriguing real world story about how tainted data and API abuse can lead to the perfect digital bank heist.
-
Why API hackers should embrace failure
Embrace failure. Explore how mistakes and setbacks can fuel innovation, refine skills, and deepen understanding in the world of API hacking.
-
Avoiding the Apocalypse: A Guide to Finding Zombie APIs
Learn how to look for those old forgotten zombie APIs that can be a goldmine of vulnerabilities and security loopholes.
-
Cross-Tenant Data Leaks (CTDL): Why API Hackers Should Be On The LookOut
Learn how to find vulnerabilities in multi-tenant apps and APIs that expose cross-tenant data leaks (CTDL) during your security testing.
-
Is Offensive AI Going to be a Problem for API Hackers?
Learn the ins and outs of offensive AI and how API hackers can benefit from it.
-
Why you should never trust PoC exploits on GitHub
Read this to understand why you should never blindly trust proof of concept (PoC) exploits shared on GitHub.