API Security 13
- Mobile API Pentesting: App, Protocol and Backend
- Secret Leakage in LLM Applications: Prompts and RAG
- MCP Servers as an Attack Surface: Tools and Tokens
- Race Conditions in Web Applications: Finding the Window
- OAuth Account Takeover Chains: state, PKCE and Linking
- Business Logic Vulnerabilities: Attacking the Rules
- GraphQL for Pentesters: Schema, Resolvers and Batching
- API Security for Pentesters: BOLA, BFLA and Beyond
- JWT Attacks for Pentesters: Beyond the none Algorithm
- Hack The Box Ransom Writeup (Medium Linux)
- Hack The Box SteamCloud Writeup (Easy Linux)
- Hack The Box Craft Writeup (Medium Linux)
- Hack The Box PC Writeup (Easy Linux)
