Dana Epp is a journalist who specializes in cybersecurity and API security. With a focus on providing practical tips and insights for security professionals, Dana writes for Security Boulevard, covering topics such as exploit prediction, bug hunting, and the future of API security.
Preston is the artificial intelligence that powers the Intelligent Relations PR platform. Meet Preston
Not enough data
Dana Epp's coverage indicates a strong focus on cybersecurity and web application security, particularly related to API exploitation and hacking techniques. He is likely responsive to pitches that offer expert commentary or insights in these areas.
Given Dana's expertise in the field of cybersecurity and web application security, he may be interested in receiving pitches from professionals who can provide unique perspectives on emerging trends, new technologies, or innovative approaches within this industry.
It’s worth noting that while Dana doesn't have a specific geographic focus, his articles cover topics that are relevant globally. Therefore, anyone with expertise in the field of cybersecurity and web application security could potentially interest him regardless of their location.
This information evolves through artificial intelligence and human feedback. Improve this profile .
Tracfone learned the hard way that API security testing matters. To the tune of a $16 million dollar settlement with the FCC
Over the years, I have seen some confusion over the purpose and usage of the custom HTTP header X-Bug-Bounty . Today, I want to clarify what it's for and how it SHOULD be used.
So here's the thing. The Internet is AWESOME for finding articles and videos on hacking mobile apps and APIs. The problem is, the well-indexed stuff is… well… just wrong.
Learn how to improve your API discovery with a custom Burp Suite extension dedicated to automatically finding API document artifacts for you. The post Hacking API discovery with a custom Burp extension appeared first on Dana Epp's Blog.
Learn how to write exploits that take advantage of blind command injection vulnerabilities using a time-delayed boolean oracle attack. The post From Exploit to Extraction: Data Exfil in Blind RCE Attacks appeared first on Dana Epp's Blog.
Learn how to cross-reference Known Exploit Vulnerabilities (KEV) against CWE to find the best attack vectors to use during security testing. The post KEV + CWE = Attack Vector ❤️🔥 appeared first on Dana Epp's Blog.
The Known Exploitable Vulnerabilities (KEV) Catalog contains an active list of vulnerabilities observed to be (or have been) actively exploited.
The folks over at Packt Publishing sent me a gift recently. It was a copy of one of their latest books, Pentesting APIs: A practical guide to discovering, fingerprinting, and exploiting APIs
Learn why shadow APIs sometimes provide a defenseless path for threat actors, and learn what YOU can do about it. The post Why Shadow APIs provide a defenseless path for threat actors appeared first on Dana Epp's Blog.
By: Dana Epp
Security research is a unique blend of art and science. Uncovering vulnerabilities in web applications and APIs requires curiosity, technical acumen, and persistence.
(833) 317-6278 
