⤷ Title: Understanding Hacking GraphQL — Part 2
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
Medium
Understanding Hacking GraphQL — Part 2
In part 1, we introduced GraphQL, explored why it’s gaining popularity, and examined its security implications. We also covered the basics…
⤷ Title: Generic University | API hacking Practice lab⚒️
════════════════════════
𐀪 Author: n1nja9
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #hacking_lab #apihacking #api_penetration_testing
════════════════════════
𐀪 Author: n1nja9
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #hacking_lab #apihacking #api_penetration_testing
Medium
Generic University | API hacking Practice lab🔎⚒️
Thanks to Katie Paxton-Fear for creating this vulnerable API for practicing.
⤷ Title: Exploiting a Mass Assignment API Vulnerability
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:59:14 GMT
════════════════════════
⌗ Tags: #information_disclosure #cybersecurity #burpsuite #api #apihacking
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:59:14 GMT
════════════════════════
⌗ Tags: #information_disclosure #cybersecurity #burpsuite #api #apihacking
Medium
🐍 Exploiting a Mass Assignment API Vulnerability
Turned a product review into a silent assassin — Carlos never saw it coming.
⤷ Title: The Ultimate Guide to API Hacking in 2025: From Basics to Advanced Exploits
════════════════════════
𐀪 Author: Farhan Alam
════════════════════════
ⴵ Time: Tue, 19 Aug 2025 07:01:11 GMT
════════════════════════
⌗ Tags: #apihacking #apptestingtips #bug_bounty_writeup #bug_bounty #api
════════════════════════
𐀪 Author: Farhan Alam
════════════════════════
ⴵ Time: Tue, 19 Aug 2025 07:01:11 GMT
════════════════════════
⌗ Tags: #apihacking #apptestingtips #bug_bounty_writeup #bug_bounty #api
Medium
🚀 The Ultimate Guide to API Hacking in 2025: From Basics to Advanced Exploits
APIs (Application Programming Interfaces) run the modern web. From mobile apps to IoT devices, everything talks through APIs.
And guess…
And guess…
⤷ Title: Web, API & LLM Penetration Testing
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 21 Aug 2025 18:38:39 GMT
════════════════════════
⌗ Tags: #apihacking #llm #ai #cybersecurity #appsec
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 21 Aug 2025 18:38:39 GMT
════════════════════════
⌗ Tags: #apihacking #llm #ai #cybersecurity #appsec
Medium
Web, API & LLM Penetration Testing
Walkthrough for Zero Health Security Challenges (Created by Aliyu G.)
⤷ Title: Hacking — Damn-Vulnerable-RESTaurant-API-Game
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
Medium
Hacking — Damn-Vulnerable-RESTaurant-API-Game
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical…
⤷ Title: Hacking — Damn-Vulnerable-RESTaurant-API-Game | API hacking Practice lab
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
Medium
Hacking — Damn-Vulnerable-RESTaurant-API-Game
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical…
⤷ Title: Where to Get Rear Api End Points for pentesting testing
════════════════════════
𐀪 Author: Imran Niaz
════════════════════════
ⴵ Time: Sat, 04 Oct 2025 03:11:47 GMT
════════════════════════
⌗ Tags: #pentesting #api_penetration_testing #apihacking #hacking #api_testing
════════════════════════
𐀪 Author: Imran Niaz
════════════════════════
ⴵ Time: Sat, 04 Oct 2025 03:11:47 GMT
════════════════════════
⌗ Tags: #pentesting #api_penetration_testing #apihacking #hacking #api_testing
Medium
Where to Get Rear Api End Points for pentesting testing
This article will help you to understand about exploiting Apis so if you are having issues related to finding word list or endpoints
⤷ Title: Hacking Vulnerable Bank API (Extensive)
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 06:26:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #penetration_testing #apihacking #api
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 06:26:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #penetration_testing #apihacking #api
Medium
Hacking Vulnerable Bank API (Extensive)
Exploiting about 40 vulnerabilities on a vulnerable bank APIs, and documenting every step to help professionals with an API test…
⤷ Title: API Bug Bounty Mastery 2026: Hunt Hidden Endpoints to Land $10k+ Payouts
════════════════════════
𐀪 Author: Manoj
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 12:44:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_pentesting #bug_bounty #apihacking
════════════════════════
𐀪 Author: Manoj
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 12:44:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_pentesting #bug_bounty #apihacking
Medium
API Bug Bounty Mastery 2026: Hunt Hidden Endpoints to Land $10k+ Payouts
A Step‑by‑Step Methodology — From Passive Recon & JavaScript Leakage to Mass Assignment, BOLA Chains, and Critical Privilege Escalation
⤷ Title: Writeup VulnShop — Vulnerable E-Commerce API Penetration Testing Lab
════════════════════════
𐀪 Author: Easpy
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 05:29:39 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #api #penetration_testing #apihacking #hacking
════════════════════════
𐀪 Author: Easpy
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 05:29:39 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #api #penetration_testing #apihacking #hacking
Medium
Writeup VulnShop — Vulnerable E-Commerce API Penetration Testing Lab
Pada artikel kali ini, saya akan menulis mengenai API penetration testing menggunakan Lab VulnShop. Lab VulnShop tersebut, dapat diakses…
⤷ Title: How I was able to hack more than 300 website
════════════════════════
𐀪 Author: Shirokage Unit (白影ユニット)
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 21:10:16 GMT
════════════════════════
⌗ Tags: #apihacking #hacking #exploitation #life_hacking
════════════════════════
𐀪 Author: Shirokage Unit (白影ユニット)
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 21:10:16 GMT
════════════════════════
⌗ Tags: #apihacking #hacking #exploitation #life_hacking
Medium
How I was able to hack more than 300 website
This is not just joke this will be a clear demonstration that how we was able to take over on multiple organization. Including some of the…
⤷ Title: Mastery Hunt: Hidden API Endpoints — A Deep Dive into API Bug Bounty Recon & Exploitation
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 07:04:50 GMT
════════════════════════
⌗ Tags: #apihacking #api_security #apirecon #apihunting #api_security_testing
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 07:04:50 GMT
════════════════════════
⌗ Tags: #apihacking #api_security #apirecon #apihunting #api_security_testing
Medium
Mastery Hunt: Hidden API Endpoints — A Deep Dive into API Bug Bounty Recon & Exploitation
API security testing is the crown jewel of modern bug bounty hunting. While front-end vulnerabilities still exist, APIs are where the real…
⤷ Title: API Fuzzing for Bug Bounty: The Complete Attack-Focused Methodology
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 08:05:18 GMT
════════════════════════
⌗ Tags: #apihacking #api_security #apirecon #apifuzzing #bug_bounty
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 08:05:18 GMT
════════════════════════
⌗ Tags: #apihacking #api_security #apirecon #apifuzzing #bug_bounty
Medium
API Fuzzing for Bug Bounty: The Complete Attack-Focused Methodology
API fuzzing is one of the most effective techniques for uncovering hidden vulnerabilities that traditional testing often misses. From…
⤷ Title: Lab: Exploiting server-side parameter pollution in a query string (API testing) #lab 2
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 12:51:12 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #hacking #portswigger_lab #apihacking
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 12:51:12 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #hacking #portswigger_lab #apihacking
Medium
Lab: Exploiting server-side parameter pollution in a query string (API testing) #lab 2
Solution:
⤷ Title: The 5 API Bugs That Actually Pay in 2026 (And the 3 Tools I Use to Find Them)
════════════════════════
𐀪 Author: Afi0pchik
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 17:47:12 GMT
════════════════════════
⌗ Tags: #apihacking #penetration_testing #api_security #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Afi0pchik
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 17:47:12 GMT
════════════════════════
⌗ Tags: #apihacking #penetration_testing #api_security #bug_bounty #cybersecurity
Medium
The 5 API Bugs That Actually Pay in 2026 (And the 3 Tools I Use to Find Them)
Hi everyone 👏
⤷ Title: API Hacking — Part 2
════════════════════════
𐀪 Author: Muhab A.
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 13:38:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #api #apihacking #cybersecurity
════════════════════════
𐀪 Author: Muhab A.
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 13:38:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #api #apihacking #cybersecurity
Medium
API Hacking — Part 2
In Part 1, we covered the recon phase, BOLA, Broken Authentication (including a JWT deep-dive), and Broken Object Property Level…
⤷ Title: API Hacking — Part 1
════════════════════════
𐀪 Author: Muhab A.
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 13:37:42 GMT
════════════════════════
⌗ Tags: #api #bug_hunting #apihacking #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Muhab A.
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 13:37:42 GMT
════════════════════════
⌗ Tags: #api #bug_hunting #apihacking #bug_bounty #cybersecurity
Medium
API Hacking — Part 1
APIs are everywhere now. Every mobile app, every SPA, every ‘modern’ web product you use today is really just a thin UI sitting on top of…
⤷ Title: MapMagic.app — Security Vulnerability Disclosure
════════════════════════
𐀪 Author: Elite X
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 17:25:14 GMT
════════════════════════
⌗ Tags: #apihacking #bug_bounty #hacker #pentesting #web_application_testing
════════════════════════
𐀪 Author: Elite X
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 17:25:14 GMT
════════════════════════
⌗ Tags: #apihacking #bug_bounty #hacker #pentesting #web_application_testing
Medium
MapMagic.app — Security Vulnerability Disclosure
Executive Summary