⤷ Title: Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps
════════════════════════
𐀪 Author: tezp
════════════════════════
ⴵ Time: Thu, 08 May 2025 16:53:42 GMT
════════════════════════
⌗ Tags: #owasp #api #api_documentation #swagger #bug_bounty
════════════════════════
𐀪 Author: tezp
════════════════════════
ⴵ Time: Thu, 08 May 2025 16:53:42 GMT
════════════════════════
⌗ Tags: #owasp #api #api_documentation #swagger #bug_bounty
Medium
Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps
“You can’t protect what you don’t know exists.” — A golden rule in cybersecurity, and the core reason shadow APIs are so dangerous.
⤷ Title: Security-First API Documentation: Your Secret Weapon for Developer Trust & Adoption
════════════════════════
𐀪 Author: Udit Narayan (BlogOQA)
════════════════════════
ⴵ Time: Sat, 20 Sep 2025 17:55:21 GMT
════════════════════════
⌗ Tags: #api_documentation #information_security #api_security #api
════════════════════════
𐀪 Author: Udit Narayan (BlogOQA)
════════════════════════
ⴵ Time: Sat, 20 Sep 2025 17:55:21 GMT
════════════════════════
⌗ Tags: #api_documentation #information_security #api_security #api
Medium
Security-First API Documentation: Your Secret Weapon for Developer Trust & Adoption
A few years back, I worked on the docs for a payments API. We were proud of how clean the reference looked, how thorough the tutorials…
⤷ Title: Exploiting an API endpoint using documentation — A Portswigger Lab
════════════════════════
𐀪 Author: ShiftLeftSec
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 11:44:03 GMT
════════════════════════
⌗ Tags: #api_security #appsec #api_documentation #burp #burpsuite
════════════════════════
𐀪 Author: ShiftLeftSec
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 11:44:03 GMT
════════════════════════
⌗ Tags: #api_security #appsec #api_documentation #burp #burpsuite
Medium
Exploiting an API endpoint using documentation
Did you know?