Dana Epp's Blog
Security (de)engineering for fun and profit
Learn how to use cURL in your exploits and demonstrate impact to the API vulnerabilities you find.