Issue 216: Hacking a .Net application, state of API security report, myths of API security
Brief
This week, we have another excellent guide from Dana Epp, this time focusing on hacking . Net applications in the real world. We have coverage on the recent Radware 2022 state of API security report and views from Matthew Reinbold on using ChatGPT for API design.
Article: Real-world guide to hacking a .Net application
Dana Epp has contributed a lot of content to this newsletter over the last year, and he returns with an excellent deep dive on how to hack . Net based APIs and applications. I particularly enjoyed the article since it is written with a different perspective from many hacking guides — Epp’s approach is to understand the host environment and use reverse engineering techniques to attack the hosted APIs and applications.
As powerful as many modern environments are, they do have one glaring weakness — they tend to leak a lot of the implementation detail.