Dana Epp's Blog
Security (de)engineering for fun and profit
Learn how to hack APIs by exploiting authorization vulnerabilities.