@Idrx @nael_idrx tolong diperbaikin lagi.
Sistem API kalian terlalu transparant, sesampainya data usernya ikutan ke distribusi “free entry”.
Traffic jaringan endpoint /api/proxy/auth/profile, agak lain ya.
Data profile lengkap, token JWT, KYC gak ada pertahanan.
Sistem API kalian terlalu transparant, sesampainya data usernya ikutan ke distribusi “free entry”.
Traffic jaringan endpoint /api/proxy/auth/profile, agak lain ya.
Data profile lengkap, token JWT, KYC gak ada pertahanan.
1
0
0
125
Vulnerable to IDRX website.
1. Excessive data exposure & sensitive data exposure (CWE-200/OWASP API3).
2. Session Hijacking Risk via JWT Cookie (OWASP API2 - Broken Authentication).
3 Potensial IDOR.
No hard feelings just fix your backend before someone comes in.
1. Excessive data exposure & sensitive data exposure (CWE-200/OWASP API3).
2. Session Hijacking Risk via JWT Cookie (OWASP API2 - Broken Authentication).
3 Potensial IDOR.
No hard feelings just fix your backend before someone comes in.
2
0
1
79
X APIを直接触らない設計のため、API料金の改定に巻き込まれる心配がありません。
既存システムの運用コストを安定させたい場面で役立ちます。
note.com/yorozuya_007
#API #システム開発
既存システムの運用コストを安定させたい場面で役立ちます。
note.com/yorozuya_007
#API #システム開発
0
0
0
How to get a #ChatGPT #API key? Five steps, what it costs, and the security mistakes that leak keys. ChatGPT Plus doesn’t include it. smashingapps.com/how-to-get-a-c…
0
1
1
65
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances reconbee.com/critical-x402-…
#SDKflaw #API #AIagent #malicious #cybersecurity #cyberattack
#SDKflaw #API #AIagent #malicious #cybersecurity #cyberattack
0
0
0
32
‼️ China proposes banning exports of AI used for cybersecurity.
It wants to ban exports of:
- AI that writes malware beating a mainstream antivirus 85%+ of the time
- AI malware that escapes sandboxes or rewrites 50%+ of its own code per run
- AI agents built for defence or - AI models trained on China's "core data"
A licence would be needed for:
- AI that finds 5+ unknown high-severity flaws in a major OS on its own
- AI that builds working exploit chains for major operating systems or browsers
- Weights of models with 2T+ parameters or a global top-10 ranking
- AI chip and memory chip designs
0
0
0
81
🔌 Sn1per Professional 2026 just dropped a documented JSON API v1.0.
Workspaces. Hosts. Vulns. Scan status. All programmable.
CI/CD pipelines. SOC dashboards. Ticketing. 🤖
Pipe it anywhere.
📖 sn1persecurity.com/wordpress/sn1p…
#API #DevSecOps #InfoSec #RedTeam
Workspaces. Hosts. Vulns. Scan status. All programmable.
CI/CD pipelines. SOC dashboards. Ticketing. 🤖
Pipe it anywhere.
📖 sn1persecurity.com/wordpress/sn1p…
#API #DevSecOps #InfoSec #RedTeam
1
0
1
145
El riesgo de no proteger correctamente los endpoints de nuestra api, viendo también como corregir este tipo de vulnerabilidades. #ciberseguridad #apirest #api #kalilinux
1
18
98
2,721
Claude API、更新ボタンのその先
・送れなくなる設定とメッセージの型を確認
・認証ヘッダーも直し、新APIで試してから公開
更新と影響する修正を一緒に確かめるため。
#Claude #API #漫画が読めるハッシュタグ
・送れなくなる設定とメッセージの型を確認
・認証ヘッダーも直し、新APIで試してから公開
更新と影響する修正を一緒に確かめるため。
#Claude #API #漫画が読めるハッシュタグ
1
0
1
54


































