rashahacks

Setting up Vulnerable REST API Penetration Testing Lab

VAmPI is a vulnerable API created with Flask (Python ) to demonstrate the top 10 vulnerabilities in APIs as outlined by OWASP Top 10 vulnerabilities. It allows you to test and evaluate the efficiency of security tools and can also be used for learning, testing skills and teaching purposes.

How I fuzz and hack APIs?

Hello Hackers, In this post, I will explain how I fuzz APIs for bugs. This blog is more about how to understand your API and then about what tools I use and where to fuzz? 1. Understanding the API 2. Where to fuzz and how to fuzz? Understanding the API?

Exploiting GraphQL Aliases

Introduction GraphQL is an API query language that allows developers to write clean code, and get as much data as they want from a single query. GraphQL uses a single endpoint like /graphql or /api/graphql and HTTP method can be POST or GET. It have queries to read data

rashahacks © 2026