Blog · 225 articles

Field notes from the offensive side

Attack chains, vulnerability deep dives, and hard-won lessons in API security from the Axeploit team.

The Great Localhost Adventure: Why Builders Move from Replit to Cursor
LatestDAST & Scanning

4 min read

The Great Localhost Adventure: Why Builders Move from Replit to Cursor

There is a certain magic in the "First Hello World." In the old days, that magic required installing a C compiler, figuring out why your PATH was broken, and.…

By Axeploit Team
Read article
The 'No Exploit, No Report' Philosophy: How Axeploit Eliminates False Positives Through Verified PoCs
DAST & Scanning

5 min read

The 'No Exploit, No Report' Philosophy: How Axeploit Eliminates False Positives Through Verified PoCs

Penetration Testing Types: Match the Test to What Your Organization Actually Needs to Prove
DAST & Scanning

6 min read

Penetration Testing Types: Match the Test to What Your Organization Actually Needs to Prove

SQL vs. NoSQL Explained: The Beginner’s Guide to Choosing the Right Database
DAST & Scanning

5 min read

SQL vs. NoSQL Explained: The Beginner’s Guide to Choosing the Right Database

Why Your Subdomains Are a Goldmine for Attackers (And How We’re Fixing It)
DAST & Scanning

4 min read

Why Your Subdomains Are a Goldmine for Attackers (And How We’re Fixing It)

Keep reading

More articles

Your App Works in Testing. Attackers Do Not Test the Same Way.

Your App Works in Testing. Attackers Do Not Test the Same Way.

dast

The Secret of Database Keys: A Beginner’s Guide to Organizing Data

The Secret of Database Keys: A Beginner’s Guide to Organizing Data

dast

Session IDs in Cookies: The Default That Only Stays Safe If You Ignore the URL

Session IDs in Cookies: The Default That Only Stays Safe If You Ignore the URL

api auth

New AI Threat: 5 Steps to Secure Autonomous “AI Agents” Before They Compromise Your Network

New AI Threat: 5 Steps to Secure Autonomous “AI Agents” Before They Compromise Your Network

dast

AI Removed the Barrier to Building. It Did Not Remove the Risk.

AI Removed the Barrier to Building. It Did Not Remove the Risk.

dast

Your Users Can See Each Other's Data. No Scanner Will Tell You.

Your Users Can See Each Other's Data. No Scanner Will Tell You.

idor