Building a Dedicated Web App & API Pentesting Lab

Learn how to build a dedicated web app and API pentesting lab using Docker, explore various vulnerable applications, and enhance your penetration testing skills.

What factors impact the cost of an API or microservice penetration test?

This article describes the main factors we take into account when estimating the cost of an API penetration test.

The Critical Need for API Security Testing

Discover why API security testing is crucial for protecting sensitive data and preventing breaches in modern applications.

The reason I stopped using Postman for API Pentests

In May of 2023, Postman announced they were deprecating offline use. This post explores the problem this poses, and Postman alternatives for pentesting.

ZAPmas Feedback

A great introduction to ZAP that provide a very fair and balanced comparison to Burp Suite.

Twelve Days of ZAPmas – Day 7 – API Testing with Postman and ZAP

Day 7 of the series sets up Postman to proxy through Zed Attack Proxy, and explains why I prefer this setup for my API testing.

Three Excellent API Security Practices Most People Neglect

Widely-used single-purpose products like Slack to cloud-based solutions like AWS and Microsoft Azure, APIs are used to drive business processes.

Getting Started API Penetration Testing with Insomnia

In our blog series on Better API Penetration Testing with Postman we discussed using Postman as the client for testing RESTful service APIs.

Better API Penetration Testing with Postman – Part 4

This is the final part of this series. We will use some of Burp Suite’s extensions to augment your API testing toolchain.

Automating Red Team Homelabs: Part 2 – Build, Pentest, Destroy, and Repeat

The process of building your own fully updated, customized kali vagrant box automatically, and then talk about how to use that box effectively.