⤷ Title: PTaaS (Penetration Testing as a Service) — Blacklock Security Limited
════════════════════════
𐀪 Author: Black Lock
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 06:34:03 GMT
════════════════════════
⌗ Tags: #penetration_testing #ptaas #api_penetration_testing
════════════════════════
𐀪 Author: Black Lock
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 06:34:03 GMT
════════════════════════
⌗ Tags: #penetration_testing #ptaas #api_penetration_testing
Medium
PTaaS (Penetration Testing as a Service) — Blacklock Security Limited
Blacklock Security Limited delivers modern application security solutions tailored for fast-moving development environments. Our Security…
⤷ Title: How A Misconfigured Password Reset Link Led to Full Account Takeover
════════════════════════
𐀪 Author: Abhishek Kumar
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 16:56:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #api #api_penetration_testing #pentesting #hacking
════════════════════════
𐀪 Author: Abhishek Kumar
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 16:56:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #api #api_penetration_testing #pentesting #hacking
Medium
How A Misconfigured Password Reset Link Led to Full Account Takeover
During a recent API penetration testing, I found a password reset implementation that looked secure at first place.
It used JWT tokens…
It used JWT tokens…
⤷ Title: API Security Testing Methods and Tools to Use
════════════════════════
𐀪 Author: james miller
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 13:18:15 GMT
════════════════════════
⌗ Tags: #web_app_security #penetration_testing #cybersecurity #api_penetration_testing
════════════════════════
𐀪 Author: james miller
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 13:18:15 GMT
════════════════════════
⌗ Tags: #web_app_security #penetration_testing #cybersecurity #api_penetration_testing
Medium
API Security Testing Methods and Tools to Use
APIs are now the core of modern applications and are the fastest-growing attack surface. As teams ship APIs faster, security often lags…
⤷ Title: Master API Security: I Built a Vulnerable Lab for Beginners (VulnShop)
════════════════════════
𐀪 Author: Sreejihkn
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 16:54:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #api_penetration_testing #api #web_penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Sreejihkn
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 16:54:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #api_penetration_testing #api #web_penetration_testing #cybersecurity
Medium
Master API Security: I Built a Vulnerable Lab for Beginners (VulnShop) 🚀
By Sr33jihseC
⤷ Title: Introduction to API Pen-Testing: My CyberSafe Training Experience (Week 9)
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 22:13:50 GMT
════════════════════════
⌗ Tags: #vulnerability_management #application_security #owasp_api_security_top_10 #api #api_penetration_testing
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 22:13:50 GMT
════════════════════════
⌗ Tags: #vulnerability_management #application_security #owasp_api_security_top_10 #api #api_penetration_testing
Medium
Introduction to API Pen-Testing: My CyberSafe Training Experience (Week 9)
⤷ Title: Active Session Hijacking via Authentication session_id Exposed in URL
════════════════════════
𐀪 Author: Sohan
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 06:07:11 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #bug_bounty #api_penetration_testing #cybersecurity #security
════════════════════════
𐀪 Author: Sohan
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 06:07:11 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #bug_bounty #api_penetration_testing #cybersecurity #security
Medium
Active Session Hijacking via Authentication session_id Exposed in URL
Yo hackers! I’m back with another interesting bug write-up 😈🔥
Today’s issue is about session hijacking caused by an authentication…
Today’s issue is about session hijacking caused by an authentication…
⤷ Title: How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
════════════════════════
𐀪 Author: Madalitso Cheyo
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 13:44:54 GMT
════════════════════════
⌗ Tags: #api_security #api_penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Madalitso Cheyo
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 13:44:54 GMT
════════════════════════
⌗ Tags: #api_security #api_penetration_testing #cybersecurity
Medium
How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
When I first dipped my toes into API Pen-Testing, I assumed attacking an API would feel just like testing a website, only with fewer…
⤷ Title: How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
════════════════════════
𐀪 Author: Peace Dennis
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 10:20:16 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #crapi #burpsuite #api_testing #penetration_testing
════════════════════════
𐀪 Author: Peace Dennis
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 10:20:16 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #crapi #burpsuite #api_testing #penetration_testing
Medium
How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
When most people think about penetration testing, they imagine someone aggressively firing payloads at a system until something breaks.
⤷ Title: Writeup VulnShop — Vulnerable E-Commerce API Penetration Testing Lab
════════════════════════
𐀪 Author: Easpy
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 05:29:39 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #api #penetration_testing #apihacking #hacking
════════════════════════
𐀪 Author: Easpy
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 05:29:39 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #api #penetration_testing #apihacking #hacking
Medium
Writeup VulnShop — Vulnerable E-Commerce API Penetration Testing Lab
Pada artikel kali ini, saya akan menulis mengenai API penetration testing menggunakan Lab VulnShop. Lab VulnShop tersebut, dapat diakses…
⤷ Title: API Pentesting Walkthrough — PortSwigger Labs (April 2026)
════════════════════════
𐀪 Author: Nayak Sahiljsr
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 09:26:22 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Nayak Sahiljsr
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 09:26:22 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #penetration_testing #cybersecurity
Medium
API Pentesting Walkthrough — PortSwigger Labs (April 2026)
Part of the PENTESTING-BIBLE series.
⤷ Title: Understanding BOLA — The #1 API Security Risk You Can’t Ignore
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 09 May 2026 13:24:36 GMT
════════════════════════
⌗ Tags: #owasp_api_top_10 #bola #api_testing #bug_bounty #api_penetration_testing
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 09 May 2026 13:24:36 GMT
════════════════════════
⌗ Tags: #owasp_api_top_10 #bola #api_testing #bug_bounty #api_penetration_testing
Medium
Understanding BOLA — The #1 API Security Risk You Can’t Ignore
Welcome back to my API pentesting series! In this third blog, we’re diving into BOLA (Broken Object Level Authorization) — the #1 API…
⤷ Title: Penetration Testing in the Real World What No One Tells You
════════════════════════
𐀪 Author: Securium Academy
════════════════════════
ⴵ Time: Mon, 11 May 2026 10:15:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_penetration_testing #api_penetration_testing #penetration_testing_tools #cloud_penetration_testing
════════════════════════
𐀪 Author: Securium Academy
════════════════════════
ⴵ Time: Mon, 11 May 2026 10:15:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_penetration_testing #api_penetration_testing #penetration_testing_tools #cloud_penetration_testing
Medium
Penetration Testing in the Real World What No One Tells You
hese days, almost everything we do is connected to the internet — whether it’s banking, shopping, or even storing personal data. Because of…
⤷ Title: Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 16 May 2026 16:54:23 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_penetration_testing #broken_authentication #owasp_api_security_top_10 #bug_bounty
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 16 May 2026 16:54:23 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_penetration_testing #broken_authentication #owasp_api_security_top_10 #bug_bounty
Medium
Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
Introduction: Why Broken Authentication Still Wins
⤷ Title: Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 10:22:57 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_penetration_testing #broken_authentication #owasp_api_security_top_10 #bug_bounty
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 10:22:57 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_penetration_testing #broken_authentication #owasp_api_security_top_10 #bug_bounty
Medium
Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
Introduction: Why Broken Authentication Still Wins
⤷ Title: SQL & NoSQL Injection in APIs — The Vulnerability That Still Puts YOUR Data at Risk
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 11:16:33 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 11:16:33 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
Medium
SQL & NoSQL Injection in APIs — The Vulnerability That Still Puts YOUR Data at Risk
Introduction
⤷ Title: SQL & NoSQL Injection in APIs-The Vulnerability That Still Puts YOUR Data at Risk
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 11:16:33 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 11:16:33 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
Medium
SQL & NoSQL Injection in APIs — The Vulnerability That Still Puts YOUR Data at Risk
Introduction
⤷ Title: Insecure Direct Object Reference (IDOR) in User Management Allows Unauthorized Access and…
════════════════════════
𐀪 Author: Hemant Raj Bhati
════════════════════════
ⴵ Time: Mon, 18 May 2026 15:28:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #web_penetration_testing #web_security #api_penetration_testing
════════════════════════
𐀪 Author: Hemant Raj Bhati
════════════════════════
ⴵ Time: Mon, 18 May 2026 15:28:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #web_penetration_testing #web_security #api_penetration_testing
Medium
Insecure Direct Object Reference (IDOR) in User Management Allows Unauthorized Access and Modification of Arbitrary User Accounts
Summary
⤷ Title: SQL & NoSQL Injection in APIs-The Vulnerability That Still Puts YOUR Data at Risk
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Tue, 19 May 2026 09:01:42 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Tue, 19 May 2026 09:01:42 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
Medium
SQL & NoSQL Injection in APIs-The Vulnerability That Still Puts YOUR Data at Risk
Introduction