Select Page

Burp Extension – HMAC Signature in Custom HTTP Header

In this post I would like to share some steps that were required before testing could begin during a web API penetration test. The scenario of the engagement was: – A web API that came with a command line client, written in python The following steps were...