In-depth technical articles, vulnerability breakdowns, and penetration testing methodologies written by principal cybersecurity consultant Mohamed Basil.
Detailed breakdown of Broken Object-Level Authorization (BOLA) and Insecure Direct Object References (IDOR), how they manifest in APIs, and how to test for them.
A practical guide to testing REST and GraphQL endpoints for authentication flaws, rate limiting bypasses, and excessive data exposure.
Comprehensive walkthrough of what a manual web application security assessment covers across authentication, access control, XSS, and business logic.
Understanding the operational differences between automated surface scans and deep manual penetration testing for modern engineering teams.