Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sat, 18 Mar 2023 16:34:58 GMT
———————————————
✏️Title: Installing API Pentesting Tools to attack our crAPI API
———————————————
📎Link: https://medium.com/p/a4cb6cfbe25f
———————————————
Tags: #hacking #cybersecurity #api #pentesting #crapi

Medium

Installing API Pentesting Tools to attack our crAPI API

In our last article we installed crAPI vulnerable API and in this one we will start installing tools that are essentials for API pentesting…

6 views18:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Tue, 11 Apr 2023 10:13:19 GMT
———————————————
✏️Title: API Security with crAPI vulnerable lab Part 1
———————————————
📎Link: https://medium.com/p/562a0ec47997
———————————————
Tags: #hacking #api #crapi #api_security

Medium

API Security with crAPI vulnerable lab Part 1

CrAPI is a purposely vulnerable API that is designed to showcase common API security vulnerabilities outlined in the OWASP API Top 10.

8 views12:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sun, 01 Oct 2023 17:51:18 GMT
———————————————
✏️Title: How to Setup crAPI in ubuntu server and make it network accessible
———————————————
📎Link: https://medium.com/p/5175bbf8ac8e
———————————————
Tags: #bug_bounty #crapi #setup_hacking_lab #api_security #crapi_owasp

Medium

How to Setup crAPI in ubuntu server and make it network accessible

In this article we gonna setup crAPI in ubuntu server in VMware player and make crAPI accessible on a network to in order to do a…

11 views23:02

Daily Writeups

⤷ Title: OWASP crAPI Walkthrough
════════════════════════
𐀪 Author: Mehmet Senel
════════════════════════
ⴵ Time: Thu, 13 Feb 2025 11:42:12 GMT
════════════════════════
⌗ Tags: #walkthrough #crapi #api_security #owasp_api_security_top_10

Medium

OWASP crAPI Walkthrough

Merhaba,

40 views13:05

Daily Writeups

⤷ Title: crAPI: help you to understand the ten most critical API security risks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 02 Aug 2025 00:11:17 +0000
════════════════════════
⌗ Tags: #Open Source Tool #API security risks #crAPI

Penetration Testing Tools

crAPI: help you to understand the ten most critical API security risks

crAPI ((Completely Ridiculous API) defines an API that is intentionally vulnerable to the OWASP API Top 10 vulnerabilities

21 views01:04

Daily Writeups

⤷ Title: How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
════════════════════════
𐀪 Author: Peace Dennis
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 10:20:16 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #crapi #burpsuite #api_testing #penetration_testing

Medium

How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology

When most people think about penetration testing, they imagine someone aggressively firing payloads at a system until something breaks.

13 views11:04

Daily Writeups

⤷ Title: BROKEN OBJECT PROPERTY LEVEL AUTHORIZATION (BOPLA) in VAmPI and crAPI
════════════════════════
𐀪 Author: Krutika
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 15:22:01 GMT
════════════════════════
⌗ Tags: #crapi #owasp_api_security_top_10 #vampi #bopla #api_security

Medium

BROKEN OBJECT PROPERTY LEVEL AUTHORIZATION (BOPLA) in VAmPI and crAPI

One of the critical vulnerabilities in API security is Broken Object Property Level Authorization (BOPLA). It is ranked as API3: Broken…

55 views17:04

Daily Writeups

⤷ Title: IMPROPER INVENTORY MANAGEMENT in crAPI
════════════════════════
𐀪 Author: Krutika
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 05:52:32 GMT
════════════════════════
⌗ Tags: #api_security #owasp_api_security_top_10 #crapi

Medium

IMPROPER INVENTORY MANAGEMENT in crAPI

One of the often overlooked vulnerabilities in API security is Improper Inventory Management. It is categorized as API9: Improper Inventory…

30 views07:04

Daily Writeups

⤷ Title: SERVER-SIDE REQUEST FORGERY (SSRF) in crAPI
════════════════════════
𐀪 Author: Krutika
════════════════════════
ⴵ Time: Fri, 01 May 2026 05:49:29 GMT
════════════════════════
⌗ Tags: #ssrf_attack #owasp_api_security_top_10 #ssrf #ssrf_vulnerability #crapi

Medium

SERVER-SIDE REQUEST FORGERY (SSRF) in crAPI

One of the dangerous vulnerabilities in API security is Server-Side Request Forgery (SSRF). It is categorized as API7: Server Side Request…

42 views07:04

Daily Writeups

⤷ Title: OWASP crAPI Walkthrough Series
════════════════════════
𐀪 Author: Boluwatife Dada
════════════════════════
ⴵ Time: Tue, 19 May 2026 22:22:40 GMT
════════════════════════
⌗ Tags: #api_security #crapi #owasp_api_security_top_10 #crapi_walkthrough

Medium

OWASP crAPI Walkthrough Series

Broken Object Level Authorization (BOLA) — API 1:2023

33 views23:04

Daily Writeups

⤷ Title: From Public Key to Admin Access: An RS256-to-HS256 JWT Confusion Attack on crAPI
════════════════════════
𐀪 Author: David Banjo
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 00:38:07 GMT
════════════════════════
⌗ Tags: #api_testing #api_security #cybersecurity #api #crapi

Medium

From Public Key to Admin Access: An RS256-to-HS256 JWT Confusion Attack on crAPI

Part 2 of a 2-part series on JWT attacks against crAPI — [catch up on Part 1 here]

40 views02:04

Daily Writeups

⤷ Title: Getting Started with Docker for Application Security: Deploying OWASP crAPI
════════════════════════
𐀪 Author: Gabriel Odusanya
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 11:52:14 GMT
════════════════════════
⌗ Tags: #crapi_owasp #docker #application_security #api_security #appsec

Medium

Getting Started with Docker for Application Security: Deploying OWASP crAPI

Learn how to deploy a deliberately vulnerable API using Docker and begin your API Security journey.

23 views12:05

About

Blog

Apps

Platform