Bilal k. Mohammed·Nov 3API-P-2: How to Find Excessive Data Exposure Using Postman and Burp SuiteA practical walkthrough of API documentation analysis, authentication, endpoint discovery, and identifying sensitive information hidden…
Bilal k. Mohammed·Nov 2API-P-1: Reverse Engineering an API: Building API Documentation with Postman and mitmproxy2swaggerAPI 1 — A practical guide to discovering undocumented API endpoints, capturing HTTP traffic, generating OpenAPI specifications, and…
sahan chamod·Sep 30Advanced API Penetration Testing: JWT, OAuth2, GraphQL & Business Logic AttacksModern applications increasingly depend on APIs for authentication, payments, mobile applications, microservices, cloud infrastructure, and…