Hi, I’m Dana Epp.

I write this blog, build and break software for a living, and am a Microsoft Regional Director and Developer Security MVP.

#danaepp

Explore why bug hunters should be more patient as vendors try to improve their application security maturity from a VDP to a BBP.

by Dana Epp May 7, 2024May 6, 2024

Learn how to weaponize developer tools used for API linting to find attack vectors in the APIs you are hacking.

by Dana Epp April 30, 2024April 21, 2024

Check out these five tips to help you pick your first target when starting bug bounty hunting against APIs.

by Dana Epp April 23, 2024April 14, 2024

Follow my journey as I try Bruno for the first time and see if it’s a good alternative to Postman for API hacking.

by Dana Epp April 16, 2024April 8, 2024

Learn how to leverage the Big List of Naughty Strings (BLNS) to break APIs using nothing more than Postman.

by Dana Epp April 9, 2024March 30, 2024

Learn how to improve the performance of your port scans against API servers with the use of Project Discovery’s Naabu scanner.

by Dana Epp March 26, 2024March 13, 2024

Learn how to improve your recon process with the use of apkleaks to find hidden API servers, secrets, and endpoints embedded in mobile apps.

by Dana Epp March 19, 2024March 9, 2024

Check out these five Burp Suite extensions that can help your API hacking. From bypassing WAFs to generating wordlists, it can all help.

by Dana Epp March 12, 2024March 9, 2024