Category - API Security Blog

I’m a software engineer in the San Francisco Bay Area.

I work at Stripe on the API team, where we build APIs for developers to use with their apps. I've been working as an engineer since 2011, and have worked in both startups and big companies. I got my ...

August 20, 2021

Your API Security Flaws are Intentional MICHAEL HIBAY JULY 9 2021 Drip.

Drip. Drip. Drip https://t.co/XrJymDAADn ...

August 20, 2021

You can now follow this blog on Bloglovin’

You can now follow this blog on Bloglovin' https://t.co/zuvlO5Vk6e ...

August 20, 2021

I am the XSS Rat, an experienced ethical hacker who stands for quality and who believes knowledge is a building block we can all use to grow bigger than we ever were.

As a software test i have a unique skill set that centers around logic flaws and IDORs which i have not seen very much by other hunters. This gives me the advantage of finding less duplicates and maxi ...

August 20, 2021

The XSS Rat is an experienced ethical hacker who stands for quality and believes knowledge is a building block we can all use to grow bigger than we ever were.

As a software test i have a unique skill set that centers around logic flaws and IDORs which i have not seen very much by other hunters. This gives me the advantage of finding less duplicates and maxi ...

August 20, 2021

I’m the XSS Rat, an experienced ethical hacker who stands for quality and who believes knowledge is a building block we can all use to grow bigger than we ever were.

As a software test i have a unique skill set that centers around logic flaws and IDORs which i have not seen very much by other hunters. This gives me the advantage of finding less duplicates and maxi ...

August 20, 2021

Postman is a handy application that makes API security testing a breeze.

You can download Postman from its official website. In order to test an API, you will need the following information: The URL of the endpoint you want to access The HTTP method (GET/POST/PUT/DELETE) ...

August 20, 2021

I’m a big fan of this course.

It's well-structured, the instructor is engaging and knowledgeable, and it covers everything you need to know about SQL injection in depth. I highly recommend it! SQL Injection is an attack vector th ...

August 20, 2021