PinnedIsrael Aráoz Severiche·Nov 24, 2023Hacking APIs: Authentication & Authorization AttacksAs you know, API/Endpoints are called from many types of devices to receive information. In terms of security, your API/Endpoints must to…A response icon2A response icon2
Israel Aráoz Severiche·Jul 11How to Protect Your Privacy on the InternetThat email address in the corner of your dashboard. A customer’s credit card in your CRM. Your account balance in an open tab. We’ve all…
Israel Aráoz Severiche·Mar 1API Security Monitoring like a BossConstruyendo un Pipeline de Seguridad para APIs con Fluent Bit, Redis Streams y ClickHouse.
Israel Aráoz Severiche·Feb 19I Bypassed Authentication on 3 Production APIs — Here’s HowLast year, I tested 14 production APIs for different clients. Nine of them — more than 60% — had at least one authentication vulnerability…
Israel Aráoz Severiche·Feb 7Web Fuzzing: A Practical Testing MethodologyIn today’s digital landscape, web applications are at the heart of business and communication. However, their complexity and constant…
Israel Aráoz Severiche·Jan 30Cross-Site Request Forgery (CSRF): A Practical Methodology for Security TestingCross-Site Request Forgery (CSRF) is a critical web security vulnerability that tricks a user’s browser into executing an unwanted action…
Israel Aráoz Severiche·Jan 21Server-Side Template Injection (SSTI): A Practical Testing MethodologyServer-Side Template Injection (SSTI) remains a critical vulnerability class with the potential for Remote Code Execution (RCE). Unlike…
Israel Aráoz Severiche·Jan 15XSS Attacks: A Practical Methodology for Security TestingCross-Site Scripting (XSS) is one of the most common vulnerabilities found in web applications today. It allows attackers to inject…A response icon2A response icon2
Israel Aráoz Severiche·Jan 14Host Header Injection: A Practical Methodology for Security TestingHost Header Injection is a critical vulnerability that affects web applications relying on the HTTP Host header for various operations…A response icon1A response icon1
Israel Aráoz Severiche·Nov 25, 2025Building Secure APIs from Day OneIn today’s fast-paced digital landscape, organizations are increasingly adopting a “shift-left” approach to API security, integrating…
