Posts on websecurity
2 posts on websecurity. Notes from public sources and my own test lab.
Invisible Doors: The 'Help Yourself Without Asking' Logic in the API World
Hacking has evolved from simple SQL Injections to complex logic flaws. In this post, we dive into BOLA (Broken Object Level Authorization), the sneaky vulnerability that often bypasses automated scanners and how to spot it before the bad guys do.
June 15, 2026·4 dk readapisecuritybolaidor
The Keyless Lock of Invisible Doors: Why 'IDOR' is Just the Tip of the Iceberg in Modern API Security
A deep dive into the shift from monoliths to microservices and how logic flaws like BOLA have become the new frontier for Red Team operations.
May 5, 2026·4 dk readapisecuritybolaidor