⤷ Title: Bug Bounty Practical Lab: Finding and Exploiting an Unused API Endpoint
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 25 May 2025 17:21:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #apihacking #bug_bounty #api
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 25 May 2025 17:21:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #apihacking #bug_bounty #api
Medium
Bug Bounty Practical Lab: Finding and Exploiting an Unused API Endpoint
Manipulate a hidden API endpoint to change product pricing using HTTP method tampering and JSON injection, exposing a critical…
⤷ Title: Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Mon, 26 May 2025 09:49:33 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Mon, 26 May 2025 09:49:33 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
Medium
Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
Chained server-side parameter pollution to leak a reset token and hijack admin for the bounty mines.
⤷ Title: Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 27 May 2025 07:00:38 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 27 May 2025 07:00:38 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
Medium
Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
Chained server-side parameter pollution to leak a reset token and hijack admin for the bounty mines.
⤷ Title: Hacking Vulnerable Bank API (Extensive)
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 29 May 2025 14:23:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #penetration_testing #apihacking #api
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 29 May 2025 14:23:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #penetration_testing #apihacking #api
Medium
Hacking Vulnerable Bank API (Extensive)
Exploiting about 40 vulnerabilities on a vulnerable bank APIs, and documenting every step to help professionals with an API test…
⤷ Title: Part 1: Setting Up crAPI — A Hands-On Guide to API Hacking & Security Testing
════════════════════════
𐀪 Author: Mihir Sathvara
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 13:27:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf #apihacking #cybersecurity #walkthrough
════════════════════════
𐀪 Author: Mihir Sathvara
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 13:27:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf #apihacking #cybersecurity #walkthrough
Medium
Part 1: Booting Up crAPI & Getting into API Hacking 🚀🕵️🧑💻
🧑💻Introduction
⤷ Title: API Hacking Fundamentals for Beginners: A Guide to Getting Started
════════════════════════
𐀪 Author: Prakhar Verma
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 14:14:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #apihacking #api_security #ethical_hacking #bug_bounty
════════════════════════
𐀪 Author: Prakhar Verma
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 14:14:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #apihacking #api_security #ethical_hacking #bug_bounty
Medium
API Hacking Fundamentals for Beginners: A Guide to Getting Started
If you’re new to cybersecurity or ethical hacking, APIs (Application Programming Interfaces) are an exciting and critical area to explore…
⤷ Title: Public APIs vs. Private APIs: A Bug Hunter’s Perspective
════════════════════════
𐀪 Author: N4!T40 07
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 14:42:30 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #penetration_testing #bug_bounty #web_security #apihacking
════════════════════════
𐀪 Author: N4!T40 07
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 14:42:30 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #penetration_testing #bug_bounty #web_security #apihacking
Medium
Public APIs vs. Private APIs: A Bug Hunter’s Perspective
Application Programming Interfaces (APIs) are the backbone of modern software architecture, enabling different systems to communicate and…
⤷ Title: Understanding Hacking GraphQL — Part 2
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
Medium
Understanding Hacking GraphQL — Part 2
In part 1, we introduced GraphQL, explored why it’s gaining popularity, and examined its security implications. We also covered the basics…
⤷ Title: Generic University | API hacking Practice lab⚒️
════════════════════════
𐀪 Author: n1nja9
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #hacking_lab #apihacking #api_penetration_testing
════════════════════════
𐀪 Author: n1nja9
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #hacking_lab #apihacking #api_penetration_testing
Medium
Generic University | API hacking Practice lab🔎⚒️
Thanks to Katie Paxton-Fear for creating this vulnerable API for practicing.
⤷ Title: Exploiting a Mass Assignment API Vulnerability
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:59:14 GMT
════════════════════════
⌗ Tags: #information_disclosure #cybersecurity #burpsuite #api #apihacking
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:59:14 GMT
════════════════════════
⌗ Tags: #information_disclosure #cybersecurity #burpsuite #api #apihacking
Medium
🐍 Exploiting a Mass Assignment API Vulnerability
Turned a product review into a silent assassin — Carlos never saw it coming.
⤷ Title: The Ultimate Guide to API Hacking in 2025: From Basics to Advanced Exploits
════════════════════════
𐀪 Author: Farhan Alam
════════════════════════
ⴵ Time: Tue, 19 Aug 2025 07:01:11 GMT
════════════════════════
⌗ Tags: #apihacking #apptestingtips #bug_bounty_writeup #bug_bounty #api
════════════════════════
𐀪 Author: Farhan Alam
════════════════════════
ⴵ Time: Tue, 19 Aug 2025 07:01:11 GMT
════════════════════════
⌗ Tags: #apihacking #apptestingtips #bug_bounty_writeup #bug_bounty #api
Medium
🚀 The Ultimate Guide to API Hacking in 2025: From Basics to Advanced Exploits
APIs (Application Programming Interfaces) run the modern web. From mobile apps to IoT devices, everything talks through APIs.
And guess…
And guess…
⤷ Title: Web, API & LLM Penetration Testing
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 21 Aug 2025 18:38:39 GMT
════════════════════════
⌗ Tags: #apihacking #llm #ai #cybersecurity #appsec
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 21 Aug 2025 18:38:39 GMT
════════════════════════
⌗ Tags: #apihacking #llm #ai #cybersecurity #appsec
Medium
Web, API & LLM Penetration Testing
Walkthrough for Zero Health Security Challenges (Created by Aliyu G.)
⤷ Title: Hacking — Damn-Vulnerable-RESTaurant-API-Game
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
Medium
Hacking — Damn-Vulnerable-RESTaurant-API-Game
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical…
⤷ Title: Hacking — Damn-Vulnerable-RESTaurant-API-Game | API hacking Practice lab
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
Medium
Hacking — Damn-Vulnerable-RESTaurant-API-Game
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical…