⤷ Title: Bug Bounty Practical Lab: Finding and Exploiting an Unused API Endpoint
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 25 May 2025 17:21:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #apihacking #bug_bounty #api
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 25 May 2025 17:21:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #apihacking #bug_bounty #api
Medium
Bug Bounty Practical Lab: Finding and Exploiting an Unused API Endpoint
Manipulate a hidden API endpoint to change product pricing using HTTP method tampering and JSON injection, exposing a critical…
⤷ Title: Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Mon, 26 May 2025 09:49:33 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Mon, 26 May 2025 09:49:33 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
Medium
Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
Chained server-side parameter pollution to leak a reset token and hijack admin for the bounty mines.
⤷ Title: Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 27 May 2025 07:00:38 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 27 May 2025 07:00:38 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
Medium
Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
Chained server-side parameter pollution to leak a reset token and hijack admin for the bounty mines.
⤷ Title: Hacking Vulnerable Bank API (Extensive)
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 29 May 2025 14:23:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #penetration_testing #apihacking #api
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 29 May 2025 14:23:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #penetration_testing #apihacking #api
Medium
Hacking Vulnerable Bank API (Extensive)
Exploiting about 40 vulnerabilities on a vulnerable bank APIs, and documenting every step to help professionals with an API test…
⤷ Title: Part 1: Setting Up crAPI — A Hands-On Guide to API Hacking & Security Testing
════════════════════════
𐀪 Author: Mihir Sathvara
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 13:27:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf #apihacking #cybersecurity #walkthrough
════════════════════════
𐀪 Author: Mihir Sathvara
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 13:27:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf #apihacking #cybersecurity #walkthrough
Medium
Part 1: Booting Up crAPI & Getting into API Hacking 🚀🕵️🧑💻
🧑💻Introduction
⤷ Title: API Hacking Fundamentals for Beginners: A Guide to Getting Started
════════════════════════
𐀪 Author: Prakhar Verma
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 14:14:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #apihacking #api_security #ethical_hacking #bug_bounty
════════════════════════
𐀪 Author: Prakhar Verma
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 14:14:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #apihacking #api_security #ethical_hacking #bug_bounty
Medium
API Hacking Fundamentals for Beginners: A Guide to Getting Started
If you’re new to cybersecurity or ethical hacking, APIs (Application Programming Interfaces) are an exciting and critical area to explore…
⤷ Title: Public APIs vs. Private APIs: A Bug Hunter’s Perspective
════════════════════════
𐀪 Author: N4!T40 07
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 14:42:30 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #penetration_testing #bug_bounty #web_security #apihacking
════════════════════════
𐀪 Author: N4!T40 07
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 14:42:30 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #penetration_testing #bug_bounty #web_security #apihacking
Medium
Public APIs vs. Private APIs: A Bug Hunter’s Perspective
Application Programming Interfaces (APIs) are the backbone of modern software architecture, enabling different systems to communicate and…
⤷ Title: Understanding Hacking GraphQL — Part 2
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
Medium
Understanding Hacking GraphQL — Part 2
In part 1, we introduced GraphQL, explored why it’s gaining popularity, and examined its security implications. We also covered the basics…
⤷ Title: Generic University | API hacking Practice lab⚒️
════════════════════════
𐀪 Author: n1nja9
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #hacking_lab #apihacking #api_penetration_testing
════════════════════════
𐀪 Author: n1nja9
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #hacking_lab #apihacking #api_penetration_testing
Medium
Generic University | API hacking Practice lab🔎⚒️
Thanks to Katie Paxton-Fear for creating this vulnerable API for practicing.
⤷ Title: Exploiting a Mass Assignment API Vulnerability
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:59:14 GMT
════════════════════════
⌗ Tags: #information_disclosure #cybersecurity #burpsuite #api #apihacking
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:59:14 GMT
════════════════════════
⌗ Tags: #information_disclosure #cybersecurity #burpsuite #api #apihacking
Medium
🐍 Exploiting a Mass Assignment API Vulnerability
Turned a product review into a silent assassin — Carlos never saw it coming.
⤷ Title: The Ultimate Guide to API Hacking in 2025: From Basics to Advanced Exploits
════════════════════════
𐀪 Author: Farhan Alam
════════════════════════
ⴵ Time: Tue, 19 Aug 2025 07:01:11 GMT
════════════════════════
⌗ Tags: #apihacking #apptestingtips #bug_bounty_writeup #bug_bounty #api
════════════════════════
𐀪 Author: Farhan Alam
════════════════════════
ⴵ Time: Tue, 19 Aug 2025 07:01:11 GMT
════════════════════════
⌗ Tags: #apihacking #apptestingtips #bug_bounty_writeup #bug_bounty #api
Medium
🚀 The Ultimate Guide to API Hacking in 2025: From Basics to Advanced Exploits
APIs (Application Programming Interfaces) run the modern web. From mobile apps to IoT devices, everything talks through APIs.
And guess…
And guess…
⤷ Title: Web, API & LLM Penetration Testing
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 21 Aug 2025 18:38:39 GMT
════════════════════════
⌗ Tags: #apihacking #llm #ai #cybersecurity #appsec
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 21 Aug 2025 18:38:39 GMT
════════════════════════
⌗ Tags: #apihacking #llm #ai #cybersecurity #appsec
Medium
Web, API & LLM Penetration Testing
Walkthrough for Zero Health Security Challenges (Created by Aliyu G.)
⤷ Title: Hacking — Damn-Vulnerable-RESTaurant-API-Game
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
Medium
Hacking — Damn-Vulnerable-RESTaurant-API-Game
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical…
⤷ Title: Hacking — Damn-Vulnerable-RESTaurant-API-Game | API hacking Practice lab
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
════════════════════════
𐀪 Author: cybern1nja9
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 15:20:40 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #apihacking #hacking_apis #api_security #broken_authorization
Medium
Hacking — Damn-Vulnerable-RESTaurant-API-Game
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical…
⤷ Title: Where to Get Rear Api End Points for pentesting testing
════════════════════════
𐀪 Author: Imran Niaz
════════════════════════
ⴵ Time: Sat, 04 Oct 2025 03:11:47 GMT
════════════════════════
⌗ Tags: #pentesting #api_penetration_testing #apihacking #hacking #api_testing
════════════════════════
𐀪 Author: Imran Niaz
════════════════════════
ⴵ Time: Sat, 04 Oct 2025 03:11:47 GMT
════════════════════════
⌗ Tags: #pentesting #api_penetration_testing #apihacking #hacking #api_testing
Medium
Where to Get Rear Api End Points for pentesting testing
This article will help you to understand about exploiting Apis so if you are having issues related to finding word list or endpoints