DEV Community

API

Application Programming Interface

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The most dangerous API response is HTTP 200 with an empty body
mohammed_arshadansari_f2 profile

The most dangerous API response is HTTP 200 with an empty body

#api #backend #monitoring
Comments
4 min read
3 API changes to audit before your next deploy: Supabase, HubSpot, and Shopify
breakwaterdev profile

3 API changes to audit before your next deploy: Supabase, HubSpot, and Shopify

#api #devops #webdev #testing
Comments
3 min read
GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls
rxkov profile
Rxkov

GraphQL APQ Registration Bypasses Query Allowlists and Introspection Controls

#api #cybersecurity #infosec #security
Comments
5 min read
API Token in Query Parameter: Six Places the Credential Persists Without You Knowing
rxkov profile
Rxkov

API Token in Query Parameter: Six Places the Credential Persists Without You Knowing

#api #backend #cybersecurity #security
Comments
5 min read
SSRF in APIs: Six URL-Accepting Parameter Types and the IMDSv1/IMDSv2 Decision That Determines Severity
rxkov profile
Rxkov

SSRF in APIs: Six URL-Accepting Parameter Types and the IMDSv1/IMDSv2 Decision That Determines Severity

#api #aws #cybersecurity #security
Comments
5 min read
Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing
rxkov profile
Rxkov

Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing

#api #authentication #cybersecurity #security
Comments
5 min read
GraphQL in Production: Introspection, Alias Batching, and Rate Limit Bypass on Real APIs
rxkov profile
Rxkov

GraphQL in Production: Introspection, Alias Batching, and Rate Limit Bypass on Real APIs

#api #cybersecurity #infosec #security
Comments
6 min read
A field disappeared from Shopify webhooks for two days and every monitor stayed green
balboubal profile

A field disappeared from Shopify webhooks for two days and every monitor stayed green

#webhooks #shopify #api #testing
Comments
9 min read
GraphQL's Six Default Attack Surfaces
rxkov profile
Rxkov

GraphQL's Six Default Attack Surfaces

#api #cybersecurity #infosec #security
Comments
5 min read
JWT kid Parameter Attacks: SQL Injection and Path Traversal via Key ID
rxkov profile
Rxkov

JWT kid Parameter Attacks: SQL Injection and Path Traversal via Key ID

#api #backend #cybersecurity #security
Comments
5 min read
XXE in APIs: Discovering Hidden XML Acceptance and Exfiltrating Data via OOB
rxkov profile
Rxkov

XXE in APIs: Discovering Hidden XML Acceptance and Exfiltrating Data via OOB

#api #cybersecurity #infosec #security
Comments
6 min read
Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected
rxkov profile
Rxkov

Working: API file upload defenses fail because validator fragmentation across upload paths leaves one path always unprotected

#api #cybersecurity #infosec #security
Comments
6 min read
GraphQL as Attack Surface: Introspection, Batching, and Schema Enumeration
rxkov profile
Rxkov

GraphQL as Attack Surface: Introspection, Batching, and Schema Enumeration

#api #cybersecurity #infosec #security
Comments
6 min read
FastAPI NAC Sisteminde Ne Ä°Ĺź Yapar?
feyzadandal profile

FastAPI NAC Sisteminde Ne Ä°Ĺź Yapar?

#api #architecture #backend #python
Comments
2 min read
From API to AI Agent: Turning a Laravel Backend Into a Tool-Using System
hosseinhezami profile

From API to AI Agent: Turning a Laravel Backend Into a Tool-Using System

#ai #laravel #agents #api
5
Comments 1
11 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.