Category - API Security Blog

The API was sending a POST request to the forum without an Authorization header.

In this case, I decided to take a closer look at the API and some information in the POST data caught my attention. It was taking an ID information defined by the API (I guess) in the header of the re ...

24 августа, 2021

Im a big fan of the new features in C# 6.

0, and I think they will make programming easier for many developers. What is C#? C# (pronounced see sharp) is a general-purpose programming language developed by Microsoft that runs on Windows, ...

24 августа, 2021

REST APIs are everywhere and they’re insecure.

[00:03:13] So from a penetration testing perspective, how do you approach that? Do you just go after the API or is it part of your overall scope to look at the security of REST API? How do you approa ...

24 августа, 2021

I’m a software tester who has been working in the field for over 10 years.

I have worked with companies such as Microsoft, HP and Deloitte. In this course we will be teaching you how to build an API from scratch using NodeJS which is one of the most popular languages used by ...

23 августа, 2021

I’m not sure I’d call it a “hack” but it’s definitely an interesting way to get around the problem of having to do all your work in one language.

The Problem: You Need To Work In Multiple Languages, But Your IDE Is Only One Of Them I've been working on a project that involves writing some C++ code for a library and then using that library from ...

23 августа, 2021

This is a summary of the main security issues that need attention, outlining attack threats and surface

This is a summary of the main security issues that need attention, outlining attack threats and surface https://t.co/iY3DLPgdAj ...

23 августа, 2021

If you’re not paying for a product, you are the product.

The following is an excerpt from my book " The Web Application Hacker's Handbook ." It details how to use Burp Suite effectively and efficiently. I hope it helps https://t.co/Rfq5NTCjLL ...

23 августа, 2021

I think the best way to make this work is to have a single, global object that stores all of the data.

The problem with having multiple objects is that you can't easily share information between them. If I want to know if an item has been looted or not, I need access to both the inventory and character ...

23 августа, 2021