API security testing is similar to functional API testing.

You can use the same tools and techniques for both, but you should also include negative tests in your test setup. OWASP Top Ten Security Issues For APIs Let's now look at each of the top ten OWASP ...

Continue Reading
SAST tools are not designed for API-centric applications.

API Security Testing is a “Black Box” Problem The second problem with SAST is that it only provides information about the vulnerabilities in an application, and does not provide any insight into ho ...

Continue Reading
I’m a big fan of the show, but I think it’s time for me to move on.

I've been watching The Walking Dead since season 2. It was my favorite show at the time and remains one of my favorites today. However, I feel like it's finally reached its peak in terms of quality an ...

Continue Reading
Salt is the leading platform for securing APIs.

Salt secures your API-driven data and services by protecting them at every layer: from network to application, in transit and at rest. Our patented approach delivers unmatched security visibility, con ...

Continue Reading
SAST tools are not designed for API-centric applications and as such do a poor job of detecting vulnerabilities within them.

API Security testing is different from web app security testing The OWASP Top 10 list for APIs includes the following:  Cross Site Request Forgery (CSRF), Broken Authentication and Session Managemen ...

Continue Reading
Bookstore is a boot2root CTF machine that teaches a beginner penetration tester basic web enumeration and REST API Fuzzing.

Several hints can be found when enumerating the services, the idea is to understand how a vulnerable API can be exploited, you can contact me on twitter @sidchn_20 for giving any feedback regarding t ...

Continue Reading
If you want to know what’s going on with the new Star Wars movies, this is your book.

I am a huge fan of the original three Star Wars films (the prequels are not my jam). I have seen them all many times over and own multiple copies of each one. I also really enjoy the Expanded Universe ...

Continue Reading
The government is suing AT&T for fraud, claiming that it has been overcharging the US for years

The government is suing AT&T for fraud, claiming that it has been overcharging the US for years https://t.co/vflV1EiKLF ...

Continue Reading

Back to Main

Subscribe for the latest news: