Field notes / archive

Selected writing

Practical notes on security, software, and the systems that make both possible.

Dec 5, 2024 6 min read

API Security Testing: Finding Vulnerabilities in Modern Web APIs

A practical guide to testing REST APIs for security vulnerabilities, covering authentication bypasses, IDOR, injection attacks, and rate limiting issues.

API Security
Web Security
Penetration Testing

Read article