Learning and Sharing stuff on API Hacking!

Authentication Bypass Via JKU Header Injection | JWT Hacking
6:20
Authentication Bypass Via JKU Header Injection | JWT Hacking
Authentication Bypass Via JWK Header Injection | JWT Hacking
9:05
Authentication Bypass Via JWK Header Injection | JWT Hacking
Subdomain Enumeration ALL KINDS!
9:36
Subdomain Enumeration ALL KINDS!
Hunting Open Redirects: A Pathway to Chaining XSS
7:59
Hunting Open Redirects: A Pathway to Chaining XSS
Unmasking the Ghost: The CWE-352 Dilemma🎙 Snake Bytes Ep. 4: Web Ghosts
10:24
Unmasking the Ghost: The CWE-352 Dilemma🎙 Snake Bytes Ep. 4: Web Ghosts
Web Cache Poisoning: Hunting Methodology & Real-World Examples
11:24
Web Cache Poisoning: Hunting Methodology & Real-World Examples
The Danger of CWE-922 🎙 Snake Bytes Ep. 3: Data Dumpster
9:22
The Danger of CWE-922 🎙 Snake Bytes Ep. 3: Data Dumpster
Loose Locks: A Podcast with _smile_hacker_ 🎙 : Snake Bytes Ep. 2
19:02
Loose Locks: A Podcast with _smile_hacker_ 🎙 : Snake Bytes Ep. 2
How Missing Keys Leave Your Castle Open🎙 Snake Bytes Ep. 1: Barrier Bypass
7:09
How Missing Keys Leave Your Castle Open🎙 Snake Bytes Ep. 1: Barrier Bypass
How To Exploit SSRF To Fetch AWS Credentials
9:07
How To Exploit SSRF To Fetch AWS Credentials
OWASP API Top 10 - Broken Authentication
8:45
OWASP API Top 10 - Broken Authentication
XSS Using Indirect Prompt Injection | PART 5
6:17
XSS Using Indirect Prompt Injection | PART 5
LLM API Hacking | Indirect Prompt Injection in LLM APIs | PART 4
10:10
LLM API Hacking | Indirect Prompt Injection in LLM APIs | PART 4
LLM API Hacking | OS Command Injection in LLM APIs | PART 3
8:45
LLM API Hacking | OS Command Injection in LLM APIs | PART 3
LLM API Hacking | Excessive Agency | PART 2
5:50
LLM API Hacking | Excessive Agency | PART 2
LLM API Hacking | Introduction | PART 1
5:04
LLM API Hacking | Introduction | PART 1
HTTP Parameter Pollution VS Mass Assignment
8:42
HTTP Parameter Pollution VS Mass Assignment
IDOR In Shopify GraphQL API | Report Explained
4:03
IDOR In Shopify GraphQL API | Report Explained
Server-Side Parameter Pollution in REST APIs
14:29
Server-Side Parameter Pollution in REST APIs
Exploring Server-Side Parameter Pollution: Real Case Scenario, Parameter Precedence, and More!
15:17
Exploring Server-Side Parameter Pollution: Real Case Scenario, Parameter Precedence, and More!
Performing CSRF exploits over GraphQL
13:28
Performing CSRF exploits over GraphQL
Bypassing GraphQL Brute-Force Protections
11:58
Bypassing GraphQL Brute-Force Protections
Finding a Hidden GraphQL Endpoint
9:02
Finding a Hidden GraphQL Endpoint
Accidental Exposure of Private GraphQL Fields
10:16
Accidental Exposure of Private GraphQL Fields
Accessing Private GraphQL Fields
7:46
Accessing Private GraphQL Fields
Exploiting Mass Assignment Vulnerability in API | PortSwigger
5:25
Exploiting Mass Assignment Vulnerability in API | PortSwigger
How Can Fuzzing Help You Find Hidden API Endpoints?
9:18
How Can Fuzzing Help You Find Hidden API Endpoints?
How Hackers Exploit API Endpoints Using Documentation?
7:13
How Hackers Exploit API Endpoints Using Documentation?
How To Perform DOS Attack in GraphQL | Circular Relationship | Prevention
6:26
How To Perform DOS Attack in GraphQL | Circular Relationship | Prevention
How Broken Functionality Level Authorization Occurs? | Code Analysis and Prevention
8:51
How Broken Functionality Level Authorization Occurs? | Code Analysis and Prevention