Category - API Security Blog

API security is a top concern for organizations, but the majority of API attacks are getting past traditional WAFs and API gateways.

The industry needs to move beyond point solutions that fail to address the full range of threats facing APIs. We need to rethink how we approach API security from development through runtime, with an ...

August 24, 2021

The API was sending a POST request to the forum without an Authorization header.

In this case, I decided to take a closer look at the API and some information in the POST data caught my attention. It was taking an ID information defined by the API (I guess) in the header of the re ...

August 24, 2021

Im a big fan of the new features in C# 6.

0, and I think they will make programming easier for many developers. What is C#? C# (pronounced see sharp) is a general-purpose programming language developed by Microsoft that runs on Windows, ...

August 24, 2021

REST APIs are everywhere and they’re insecure.

[00:03:13] So from a penetration testing perspective, how do you approach that? Do you just go after the API or is it part of your overall scope to look at the security of REST API? How do you approa ...

August 24, 2021

I’m a software tester who has been working in the field for over 10 years.

I have worked with companies such as Microsoft, HP and Deloitte. In this course we will be teaching you how to build an API from scratch using NodeJS which is one of the most popular languages used by ...

August 23, 2021

I’m not sure I’d call it a “hack” but it’s definitely an interesting way to get around the problem of having to do all your work in one language.

The Problem: You Need To Work In Multiple Languages, But Your IDE Is Only One Of Them I've been working on a project that involves writing some C++ code for a library and then using that library from ...

August 23, 2021

This is a summary of the main security issues that need attention, outlining attack threats and surface

This is a summary of the main security issues that need attention, outlining attack threats and surface https://t.co/iY3DLPgdAj ...

August 23, 2021

If you’re not paying for a product, you are the product.

The following is an excerpt from my book " The Web Application Hacker's Handbook ." It details how to use Burp Suite effectively and efficiently. I hope it helps https://t.co/Rfq5NTCjLL ...

August 23, 2021