API Reconnaissance

Mapping the API attack surface before you send a single attack: OpenAPI spec discovery, JS bundle mining, recovering historical UR…

REST API Fundamentals

REST is a set of constraints, not a library. HTTP verbs and their safety/idempotency, the status-code decision tree, statelessness…