Axeploit
Axeploit

Blog· 203 articles

Field notes from the offensive side

Attack chains, vulnerability deep dives, and hard-won lessons in API security from the Axeploit team.

EDR Blindspots: Detecting Next-Gen Fileless Malware in 2026
7 min read

EDR Blindspots: Detecting Next-Gen Fileless Malware in 2026

By Harsh Nandanwar

AI Tools Help You Build Features. They Do Not Define Boundaries.
10 min read

AI Tools Help You Build Features. They Do Not Define Boundaries.

By Pallavi M

The 5 Most Lethal API Vulnerabilities We Found in Q2 (And How to Patch Them)
10 min read

The 5 Most Lethal API Vulnerabilities We Found in Q2 (And How to Patch Them)

By Harsh Nandanwar

Beyond the Gateway: How Attackers Exploit Microservice Trust Boundaries
7 min read

Beyond the Gateway: How Attackers Exploit Microservice Trust Boundaries

By Harsh Nandanwar

The Third-Party AI Dilemma: Auditing the Security of Your SaaS Vendors' LLMs
8 min read

The Third-Party AI Dilemma: Auditing the Security of Your SaaS Vendors' LLMs

By Harsh Nandanwar

Kubernetes RBAC is Broken: Why Your Clusters Are One Misconfiguration Away from Disaster
7 min read

Kubernetes RBAC is Broken: Why Your Clusters Are One Misconfiguration Away from Disaster

By Harsh Nandanwar

Startup Security Posture Assessment: A Founder’s Checklist Before Series A
5 min read

Startup Security Posture Assessment: A Founder’s Checklist Before Series A

By Pallavi M

Living off the Cloud: How Hackers Pivot Inside AWS and Azure Environments
8 min read

Living off the Cloud: How Hackers Pivot Inside AWS and Azure Environments

By Harsh Nandanwar

Server-Side Request Forgery in Cloud Environments: How Attackers Reach Your Metadata API
5 min read

Server-Side Request Forgery in Cloud Environments: How Attackers Reach Your Metadata API

By Pallavi M