Category - API Security Blog

Assumptions and tolerances are the cracks in your API security.

They're not malicious, they're just there. You can't prevent them from happening, but you can be aware of their existence and take steps to mitigate their impact on your organization's security postur ...

August 20, 2021

I’m a software engineer in the San Francisco Bay Area.

I work at Stripe on the API team, where we build APIs for developers to use with their apps. I've been working as an engineer since 2011, and have worked in both startups and big companies. I got my ...

August 20, 2021

Your API Security Flaws are Intentional MICHAEL HIBAY JULY 9 2021 Drip.

Drip. Drip. Drip https://t.co/XrJymDAADn ...

August 20, 2021

You can now follow this blog on Bloglovin’

You can now follow this blog on Bloglovin' https://t.co/zuvlO5Vk6e ...

August 20, 2021

I am the XSS Rat, an experienced ethical hacker who stands for quality and who believes knowledge is a building block we can all use to grow bigger than we ever were.

As a software test i have a unique skill set that centers around logic flaws and IDORs which i have not seen very much by other hunters. This gives me the advantage of finding less duplicates and maxi ...

August 20, 2021

The XSS Rat is an experienced ethical hacker who stands for quality and believes knowledge is a building block we can all use to grow bigger than we ever were.

As a software test i have a unique skill set that centers around logic flaws and IDORs which i have not seen very much by other hunters. This gives me the advantage of finding less duplicates and maxi ...

August 20, 2021

I’m the XSS Rat, an experienced ethical hacker who stands for quality and who believes knowledge is a building block we can all use to grow bigger than we ever were.

As a software test i have a unique skill set that centers around logic flaws and IDORs which i have not seen very much by other hunters. This gives me the advantage of finding less duplicates and maxi ...

August 20, 2021

Postman is a handy application that makes API security testing a breeze.

You can download Postman from its official website. In order to test an API, you will need the following information: The URL of the endpoint you want to access The HTTP method (GET/POST/PUT/DELETE) ...

August 20, 2021