Mateo Hanžek's Security blog

Pentesting & security research

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Tags Attack-REST-APIs

Tag

Attack-REST-APIs 1

CSRF in GraphQL and REST APIs - Attack and defend JSON endpoints Jul 23, 2025

Recently Updated

Case study: Attacking Ajenti Control Panel Authentication
CSRF in GraphQL and REST APIs - Attack and defend JSON endpoints
Chrome Referrer-Policy override Cross-Site data leak and strict CSP bypass
Weaponizing lesser known event handlers for XSS

Trending Tags

Research Attack-GraphQL-APIs Attack-REST-APIs Authentication-Bypass CORS CSP CSRF DoS Race-Condition Referrer-Policy

© 2026 Mateo Hanžek. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

Research Attack-GraphQL-APIs Attack-REST-APIs Authentication-Bypass CORS CSP CSRF DoS Race-Condition Referrer-Policy

A new version of content is available.