Security testing your APIs - Unrestricted Access to Sensitive Business Flows

Before I start: I’m writing this both to clear my head and to vent / rant a little, but also in response to people both from the Netherlands and from abroad who have shown interest in working as an independent contractor over here.

“Well, it works on my machine”

While most of the clients I work with are based in Europe, over the last couple of years my client base on the North American side of the Atlantic has slowly but surely started to grow, mainly in the United States. As someone who really enjoys working with and learning from individuals and companies across the globe, this something that I’m...

In this blog post series, I am going to explore the vulnerabilities in the OWASP API Security Top 10. For each entry, I’ll show you how to perform experiments on APIs to test for the vulnerability, and I’ll discuss my observations.

Aahh… LinkedIn. I’ve been struggling with the platform for years. One the one hand, I’ve made some great connections on there, and it has helped me tremendously in increasing my visibility, or, as I sometimes put it, as a platform for shameless self-promotion.