Dana Epp's Blog
Security (de)engineering for fun and profit
Learn how to find authorization vulnerabilities in APIs using Burp and Autorize.