Blog · 226 articles

Field notes from the offensive side

Attack chains, vulnerability deep dives, and hard-won lessons in API security from the Axeploit team.

Your Users Can See Each Other's Data. No Scanner Will Tell You.
LatestIDOR & Broken Access Control

5 min read

Your Users Can See Each Other's Data. No Scanner Will Tell You.

You built a dashboard. Each user has a profile at /api/users/42/profile. User 42 logs in, sees their name, email, billing history. Everything works.…

By Axeploit Team
Read article
You Can Build an App Without Syntax. You Cannot Secure It Without Thinking.
DAST & Scanning

5 min read

You Can Build an App Without Syntax. You Cannot Secure It Without Thinking.

Why Password Audits Miss Exactly What Hackers Are Looking For to Enter Your System
SOC 2 & Compliance

6 min read

Why Password Audits Miss Exactly What Hackers Are Looking For to Enter Your System

The Hidden Security Debt of High-Velocity AI Development
DAST & Scanning

5 min read

The Hidden Security Debt of High-Velocity AI Development

The First Thing AI Does Not Teach You About Building Apps Is Security
DAST & Scanning

11 min read

The First Thing AI Does Not Teach You About Building Apps Is Security

Keep reading

More articles

How VoidStealer is Bypassing Google Chrome’s Security & Entering Your Server

How VoidStealer is Bypassing Google Chrome’s Security & Entering Your Server

dast