BOLA and Broken Auth API Attacks with Burp Suite: Lab Guide
Hijack your own lab: find and exploit BOLA and broken-auth flaws in a vulnerable API using Burp Suite — then learn the authorization checks that actually fix them.
OWASP ZAP DAST Lab: Authenticated API Scanning Explained
Break your own API with OWASP ZAP: active scanning, authenticated scan contexts and API definitions in a step-by-step DAST lab you can rebuild for any target.
Decode ACARS and VDL2 with acarsdec and dumpvdls2: SDR Lab
Decode live aircraft ACARS and VDL2 datalink traffic with about $30 of SDR hardware, acarsdec, dumpvdls2 and Wireshark — a complete hands-on radio lab.
Weekly Threat Intel: Agentic AI Abuse and Edge CVEs
Agentic-AI abuse, the fall 2026 Edge CVE wave and infostealer tradecraft — this week’s defensive priorities in one briefing.
Weekly Threat Intel: Agentic AI, Stealer Logs, Edge CVEs
Stealer-log markets, edge-device exploitation and agentic-AI abuse: what defenders must patch, monitor and drill this week.
Fuzzing Web APIs with ffuf and Caido: Recon-to-Exploit Guide
A hands-on recon-to-exploit walkthrough: fuzz hidden endpoints and parameters with ffuf and Caido, chain the findings, and document the impact.
Ensuring Robust Security in Login and Registration Systems
Comprehensive guide to securing login and registration systems. Covers authentication vulnerabilities, brute-force protection, session management, CAPTCHA implementation, and security best practices.
- Go to the previous page
- 1
- …
- 3
- 4
- 5
- 6