diff --git a/404.html b/404.html
index b8b5c70..918a5b6 100644
--- a/404.html
+++ b/404.html
@@ -1,4 +1,4 @@
-<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>404 Page not found</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.127.0"><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>404 Page not found</a>
+<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>404 Page not found</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.128.0"><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>404 Page not found</a>
 <button class=navbar-toggle data-target=.navbar-collapse data-toggle=collapse>
 <span class=icon-bar></span>
 <span class=icon-bar></span>
diff --git a/about/index.html b/about/index.html
index 726a00d..5796987 100644
--- a/about/index.html
+++ b/about/index.html
@@ -1,4 +1,4 @@
-<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>About MindAPI Project</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.127.0"><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>About MindAPI Project</a>
+<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>About MindAPI Project</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.128.0"><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>About MindAPI Project</a>
 <button class=navbar-toggle data-target=.navbar-collapse data-toggle=collapse>
 <span class=icon-bar></span>
 <span class=icon-bar></span>
diff --git a/categories/index.html b/categories/index.html
index 9deaf0a..c2b4cb4 100644
--- a/categories/index.html
+++ b/categories/index.html
@@ -1,4 +1,4 @@
-<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Categories</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.127.0"><link href=/MindAPI/categories/index.xml rel=alternate type=application/rss+xml title=MindAPI><link href=/MindAPI/categories/index.xml rel=feed type=application/rss+xml title=MindAPI><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>Categories</a>
+<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Categories</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.128.0"><link href=/MindAPI/categories/index.xml rel=alternate type=application/rss+xml title=MindAPI><link href=/MindAPI/categories/index.xml rel=feed type=application/rss+xml title=MindAPI><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>Categories</a>
 <button class=navbar-toggle data-target=.navbar-collapse data-toggle=collapse>
 <span class=icon-bar></span>
 <span class=icon-bar></span>
diff --git a/index.html b/index.html
index 05deedd..b9a5903 100644
--- a/index.html
+++ b/index.html
@@ -1,4 +1,4 @@
-<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title></title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.127.0"><link href=/MindAPI/index.xml rel=alternate type=application/rss+xml title=MindAPI><link href=/MindAPI/index.xml rel=feed type=application/rss+xml title=MindAPI><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#></a><button class=navbar-toggle data-target=.navbar-collapse data-toggle=collapse>
+<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title></title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.128.0"><link href=/MindAPI/index.xml rel=alternate type=application/rss+xml title=MindAPI><link href=/MindAPI/index.xml rel=feed type=application/rss+xml title=MindAPI><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#></a><button class=navbar-toggle data-target=.navbar-collapse data-toggle=collapse>
 <span class=icon-bar></span>
 <span class=icon-bar></span>
 <span class=icon-bar></span></button></div><div class="collapse navbar-collapse"><ul class="nav navbar-nav"><li><a href=/MindAPI/>Home</a></li><li><a href=/MindAPI/about/>About</a></li><li><a href=/MindAPI/references/>References</a></li><li><a href=/MindAPI/play/>Play</a></li><li role=presentation class=dropdown><a class=dropdown-toggle data-toggle=dropdown href=# role=button aria-haspopup=true aria-expanded=false href=#download>Download<span class=caret></span></a><ul class=dropdown-menu><li><a id=download-interactive href=#download-interactive>Interactive HTML</a></li></ul></li></ul><ul class="nav navbar-nav navbar-right"><li class=navbar-icon><a href=mailto:davidsopas@gmail.com><i class="fas fa-envelope"></i></a></li><li class=navbar-icon><a href=https://github.com/dsopas/MindAPI><i class="fab fa-github"></i></a></li><li class=navbar-icon><a href=https://twitter.com/dsopas/><i class="fab fa-twitter"></i></a></li></ul></div></div></nav><main><div class=intro><div style=margin-top:5em></div><h2>Bringing order to API hacking chaos</h2><div class="homepage-content text-justify"><p><img src=https://raw.githubusercontent.com/dsopas/MindAPI/main/logo%20MindAPI_git.jpg alt="MindAPI mindmap"></p></div></div></main><footer><p class="copyright text-muted">© All rights reserved. Powered by <a href=https://gohugo.io>Hugo</a> and <a href=https://github.com/calintat/minimal>Minimal</a>.</p></footer></body></html>
\ No newline at end of file
diff --git a/play/index.html b/play/index.html
index 0388831..29d2ea9 100644
--- a/play/index.html
+++ b/play/index.html
@@ -1,4 +1,4 @@
-<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Play with it live</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.127.0"><link href=/MindAPI/play/index.xml rel=alternate type=application/rss+xml title=MindAPI><link href=/MindAPI/play/index.xml rel=feed type=application/rss+xml title=MindAPI><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>Play with it live</a>
+<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Play with it live</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.128.0"><link href=/MindAPI/play/index.xml rel=alternate type=application/rss+xml title=MindAPI><link href=/MindAPI/play/index.xml rel=feed type=application/rss+xml title=MindAPI><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>Play with it live</a>
 <button class=navbar-toggle data-target=.navbar-collapse data-toggle=collapse>
 <span class=icon-bar></span>
 <span class=icon-bar></span>
diff --git a/references/index.html b/references/index.html
index 1e74f9a..04f2b04 100644
--- a/references/index.html
+++ b/references/index.html
@@ -1,5 +1,5 @@
-<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>References</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.127.0"><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>References</a>
+<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>References</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.128.0"><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>References</a>
 <button class=navbar-toggle data-target=.navbar-collapse data-toggle=collapse>
 <span class=icon-bar></span>
 <span class=icon-bar></span>
-<span class=icon-bar></span></button></div><div class="collapse navbar-collapse"><ul class="nav navbar-nav"><li><a href=/MindAPI/>Home</a></li><li><a href=/MindAPI/about/>About</a></li><li><a href=/MindAPI/references/>References</a></li><li><a href=/MindAPI/play/>Play</a></li><li role=presentation class=dropdown><a class=dropdown-toggle data-toggle=dropdown href=# role=button aria-haspopup=true aria-expanded=false href=#download>Download<span class=caret></span></a><ul class=dropdown-menu><li><a id=download-interactive href=#download-interactive>Interactive HTML</a></li></ul></li></ul><ul class="nav navbar-nav navbar-right"><li class=navbar-icon><a href=mailto:davidsopas@gmail.com><i class="fas fa-envelope"></i></a></li><li class=navbar-icon><a href=https://github.com/dsopas/MindAPI><i class="fab fa-github"></i></a></li><li class=navbar-icon><a href=https://twitter.com/dsopas/><i class="fab fa-twitter"></i></a></li></ul></div></div></nav><main><div><h2>References</h2><h5></h5></div><div align=start class=content><p>Here you can find a variaty of resources to help you out on the API security path.</p><h2 id=talks--educational-videos--recorded-webinars>Talks / Educational Videos / Recorded Webinars</h2><ul><li><a href="https://www.youtube.com/watch?v=Jmyl6GoTaao">OWASP API Security Top 10 by Erez Yalon & Inon Shkedy</a></li><li><a href="https://www.youtube.com/watch?v=0ei3CdD7Ebk">Meetups at Checkmarx: An Introduction to API Security</a></li><li><a href="https://www.youtube.com/watch?v=wY6q583JWLc">Meetups at Checkmarx: API Security Concerns (Part II)</a></li><li><a href="https://www.youtube.com/watch?v=NStTnATSysY">Don’t Worry, Be API: Addressing AppSec’s Newest Challenge</a></li><li><a href="https://www.youtube.com/watch?v=YQzU8xEBiPg">Common API security pitfalls by Philippe De Ryck</a></li><li><a href="https://www.youtube.com/watch?v=_WdDq9miqyo">API (in)Security TOP 10: Guided tour</a></li><li><a href="https://www.youtube.com/watch?v=aQGbYfalRTA">Top 10 API Bugs (and Where to Find Them)</a></li><li><a href="https://www.youtube.com/watch?v=fvcKwUS4PTE">How To Do Recon: API Enumeration</a></li><li><a href="https://www.youtube.com/watch?v=viWzbPuGqpo">Hunting for bugs in GraphQL APIs (Demo)</a></li><li><a href="https://www.youtube.com/watch?v=jyjGneKJynk">Finding Your Next Bug: GraphQL</a></li><li><a href="https://www.youtube.com/watch?v=NPDp7GHmMa0">REST in Peace: Abusing GraphQL to Attack Underlying Infrastructure</a></li><li><a href="https://www.youtube.com/watch?v=jBi3a-dXsM8">Hidden in Plain Site: Disclosing Information via Your APIs</a></li><li><a href="https://www.youtube.com/watch?v=UT7-ZVawdzA">Bad API, hAPI Hackers!</a></li><li><a href="https://www.youtube.com/watch?v=ijalD2NkRFg">API Security 101</a></li><li><a href="https://www.youtube.com/watch?v=zWVRHK3ykfo">JWT Parkour</a></li><li><a href="https://www.youtube.com/watch?v=yCUQBc2rY9Y">Finding Your First Bug: Finding Bugs Using APIs</a></li><li><a href="https://www.youtube.com/watch?v=cWSu2Ja65Z4">Live API Hacking Demo</a></li><li><a href="https://www.youtube.com/watch?v=NtAnyDJhkkg">OAuth, JWT, HMAC, oh my! API security for your enterprise</a></li><li><a href="https://www.youtube.com/watch?v=hNs8fpWfcyU">API Recon with Kiterunner</a></li><li><a href="https://www.youtube.com/watch?v=eKj8F9bOOvk">Offensive GraphQL API Exploitation</a></li><li><a href="https://www.youtube.com/watch?v=f5IEe5r9to8">Traversing My Way in the Internal Network</a></li><li><a href="https://www.youtube.com/watch?v=BTlUEWHRldk">API Hacking With ChatGPT!</a></li><li><a href="https://www.youtube.com/watch?v=1PjKr4ZZ6Ww">Web Apps: APIs’ Nightmare</a></li><li><a href="https://www.youtube.com/watch?v=ccmQXJcc1co">The Secret Life of APIs: Latest Attack Data Shows What Your APIs Are Doing</a></li><li><a href="https://www.youtube.com/watch?v=9kSBsyLqFgY">I’m an API Hacker and Here’s How I Hack Everything from the Military to AI</a></li></ul><h2 id=must-read>Must read</h2><ul><li><a href=https://owasp.org/www-project-api-security/>OWASP API Security Project</a></li><li><a href=https://cheatsheetseries.owasp.org/cheatsheets/GraphQL_Cheat_Sheet.html>GraphQL Cheat Sheet</a></li><li><a href=https://github.com/shieldfy/API-Security-Checklist>API Security Checklist</a></li><li><a href=https://apisecurity.io/encyclopedia/content/api-security-encyclopedia.htm>API Security Encyclopedia</a></li><li><a href=https://github.com/inonshk/31-days-of-API-Security-Tips>31 days of API Security Tips</a></li><li><a href=https://www.microsoft.com/en-us/research/uploads/prod/2018/04/restler.pdf>REST-ler: Automatic Intelligent REST API Fuzzing</a></li><li><a href=https://www.bugcrowd.com/blog/how-to-find-idor-insecure-direct-object-reference-vulnerabilities-for-large-bounty-rewards/>How-To: Find IDOR (Insecure Direct Object Reference) Vulnerabilities for large bounty rewards</a></li><li><a href=https://medium.com/swlh/hacking-json-web-tokens-jwts-9122efe91e4a>Hacking JSON Web Tokens (JWTs)</a></li><li><a href=https://huzaifa-tahir.medium.com/methods-to-bypass-rate-limit-5185e6c67ecd>Methods to Bypass Rate Limit</a></li><li><a href=https://github.com/odomojuli/RegExAPI>Regex For Finding Popular Keys</a></li><li><a href=https://www.nopsec.com/leveraging-exposed-wadl-xml-in-burp-suite/>Leveraging Exposed WADL XML in Burp Suite</a></li><li><a href=https://www.trendmicro.com/en_us/research/20/h/how-unsecure-grpc-implementations-can-compromise-apis.html>How Unsecure gRPC Implementations Can Compromise APIs</a></li><li><a href=https://blog.davidvassallo.me/2018/10/17/pentesting-grpc-protobuf-decoding-first-steps/>Pentesting gRPC / Protobuf : Decoding First steps</a></li><li><a href=https://portswigger.net/web-security/oauth>OAuth 2.0 authentication vulnerabilities</a></li><li><a href=https://threat.tevora.com/finding-broken-access-controls/>Finding Broken Access Controls</a></li><li><a href=https://blog.assetnote.io/2021/04/05/contextual-content-discovery/>Contextual Content Discovery: You&rsquo;ve forgotten about the API endpoints</a></li><li><a href=https://assets.pentesterlab.com/jwt_security_cheatsheet/jwt_security_cheatsheet.pdf>JWT Security Cheatsheet</a></li><li><a href=https://blog.yeswehack.com/yeswerhackers/how-exploit-graphql-endpoint-bug-bounty/>How to exploit GraphQL endpoint: introspection, query, mutations & tools</a></li><li><a href=https://www.binarybrotherhood.io/oauth2_threat_model.html>OAuth 2.0 Threat Model Pentesting Checklist</a></li><li><a href=https://blog.shiftleft.io/api-security-101-broken-user-authentication-1df2ef3420d8>API Security 101: Broken User Authentication</a></li><li><a href=https://www.xmind.net/m/CSKSWZ/>IDOR Techniques Mindmap</a></li><li><a href=https://www.tenchisecurity.com/blog/thefaultinourstars>Security Implications of AWS API Gateway Lambda Authorizers and IAM Wildcard Expansion</a></li><li><a href=https://joonas.fi/2021/08/saml-is-insecure-by-design/>SAML is insecure by design</a></li><li><a href=https://labs.detectify.com/2021/08/10/how-to-hack-apis-in-2021/>How to Hack APIs in 2021</a></li><li><a href=https://blog.assetnote.io/2021/08/29/exploiting-graphql/>Exploiting GraphQL</a></li><li><a href=https://wundergraph.com/blog/the_complete_graphql_security_guide_fixing_the_13_most_common_graphql_vulnerabilities_to_make_your_api_production_ready>The complete GraphQL Security Guide: Fixing the 13 most common GraphQL Vulnerabilities to make your API production ready</a></li><li><a href=https://bevigil.com/blog/exposed-payment-integration-api-keys-imperil-millions-of-users-transaction-details-and-pii/>Exposed Payment Integration API Keys Imperil Millions of Users’ Transaction Details and PII</a></li><li><a href=https://checkmarx.com/blog/move-over-verbose-error-messages-graphql-apis-are-here/>Move Over Verbose Error Messages, GraphQL APIs are Here</a></li><li><a href=https://checkmarx.com/blog/whats-old-becomes-new-again-csrf-attacks-on-graphql-apis/>What’s Old Becomes New Again: CSRF Attacks on GraphQL APIs</a></li><li><a href=https://checkmarx.com/blog/exploiting-graphql-query-depth/>Exploiting GraphQL Query Depth</a></li><li><a href=https://checkmarx.com/blog/alias-and-directive-overloading-in-graphql/>Alias and Directive Overloading in GraphQL</a></li><li><a href=https://checkmarx.com/blog/didnt-notice-your-rate-limiting-graphql-batching-attack/>Didn’t Notice Your Rate Limiting: GraphQL Batching Attack</a></li><li><a href=https://hookdeck.com/webhooks/guides/best-practices-deploy-webhooks-production>Best Practices When Deploying Webhooks in Production</a></li></ul><h2 id=practice>Practice</h2><ul><li><a href=https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application>Damn Vulnerable GraphQL Application</a></li><li><a href=https://github.com/marmicode/websheep>Websheep</a></li><li><a href=https://github.com/DevSlop/Pixi>Pixi</a></li><li><a href=https://github.com/NeilMadden/apisecurityinaction>API Security in Action</a></li><li><a href=https://github.com/roottusk/vapi>vAPI</a></li><li><a href=https://github.com/koenbuyens/Vulnerable-OAuth-2.0-Applications>vulnerable OAuth 2.0 applications</a></li><li><a href=https://github.com/h-a-c/jwt-lab>Vulnerable JWT lab</a></li><li><a href=https://github.com/CarveSystems/vulnerable-graphql-api>Vulnerable GraphQL API</a></li><li><a href=https://application.security/free/owasp-top-10-API>KONTRAs OWASP Top 10 for API</a></li><li><a href=https://github.com/InsiderPhD/Generic-University>Vulnerable API with Laravel App</a></li><li><a href=https://github.com/Checkmarx/capital>c{api}tal</a></li><li><a href=https://github.com/parasoft/parabank>ParaBank</a></li><li><a href=https://github.com/erev0s/VAmPI/>VAmPI</a></li><li><a href=https://github.com/theowni/Damn-Vulnerable-Restaurant-API-Game>Damn Vulnerable Restaurant</a></li></ul><h2 id=writeups>Writeups</h2><ul><li><a href=https://spongebhav.medium.com/facebook-group-members-disclosure-e53eb83df39e>Facebook Group Members Disclosure</a></li><li><a href=https://www.pingsafe.ai/blog/how-we-could-have-listened-to-anyones-call-recordings>How we could have listened to anyone&rsquo;s call recordings</a></li><li><a href=https://thezerohack.com/how-i-might-have-hacked-any-microsoft-account>How I Might Have Hacked Any Microsoft Account</a></li><li><a href=https://www.pingsafe.ai/blog/hacking-truecallers-guardian-application-to-track-you>How we could have tracked anyone&rsquo;s live location using Truecaller&rsquo;s &ldquo;Guardians&rdquo; app</a></li><li><a href="https://ysamm.com/?p=629">Enumerate internal cached URLs which lead to data exposure</a></li><li><a href=https://alissaknight.medium.com/all-that-we-let-in-hacking-mhealth-apps-and-apis-part-2-1a55b928ce67>All That We Let In: Hacking mHealth Apps and APIs</a></li><li><a href=https://www.pentestpartners.com/security-blog/tour-de-peloton-exposed-user-data/>Tour de Peloton: Exposed user data</a></li><li><a href=https://www.pentestpartners.com/security-blog/smart-car-chargers-plug-n-play-for-hackers/>Smart car chargers. Plug-n-play for hackers?</a></li><li><a href=https://www.wordfence.com/blog/2021/08/xss-vulnerability-patched-in-seopress-affects-100000-sites/>XSS Vulnerability Patched in SEOPress Affects 100,000 sites</a></li><li><a href=https://blog.usamav.dev/two-account-takeover-bugs-worth-4300-dollar-bounty>Two account takeover bugs worth $4300</a></li><li><a href=https://robertheaton.com/bumble-vulnerability/>Vulnerability in Bumble dating app reveals any user&rsquo;s exact location</a></li><li><a href=https://infosecwriteups.com/this-is-how-i-was-able-to-see-private-archived-posts-stories-of-users-on-instagram-without-de70ca39165c>This is how I was able to see Private, Archived Posts/Stories of users on Instagram without following them</a></li><li><a href=https://www.pentestpartners.com/security-blog/free-brewdog-beer-with-a-side-order-of-shareholder-pii/>Free BrewDog beer with a side order of shareholder PII?</a></li><li><a href=https://www.wordfence.com/blog/2022/01/unauthenticated-xss-vulnerability-patched-in-html-email-template-designer-plugin/>Unauthenticated XSS Vulnerability Patched in HTML Email Template Designer Plugin</a></li><li><a href=https://www.pentestpartners.com/security-blog/dpd-package-sniffing/>DPD package sniffing</a></li><li><a href=https://medium.com/@damaidec/idor-vulnerability-on-invoice-and-weak-password-reset-leads-to-account-take-over-603b42143a8c>IDOR vulnerability on invoice and weak password reset leads to account take over</a></li><li><a href=https://www.rapid7.com/blog/post/2022/11/16/cve-2022-41622-and-cve-2022-41800-fixed-f5-big-ip-and-icontrol-rest-vulnerabilities-and-exposures/>F5 BIG-IP and iControl REST Vulnerabilities and Exposures</a></li><li><a href=https://www.troyhunt.com/how-spoutibles-leaky-api-spurted-out-a-deluge-of-personal-data/>How Spoutible’s Leaky API Spurted out a Deluge of Personal Data</a></li><li><a href=https://iter.ca/post/gh-sig-pwn/>Forging signed commits on GitHub</a></li><li><a href=https://zerodayhacker.com/crapi-walkthrough-using-ai/>crAPI walkthrough using AI</a></li><li><a href=https://zerodayhacker.com/parabank-walkthrough/>ParaBank walkthrough</a></li><li><a href=https://zerodayhacker.com/capital-walkthrough/>c{api}tal walkthrough</a></li><li><a href=https://zerodayhacker.com/vapi-walkthrough/>vAPI walkthrough</a></li><li><a href=https://zerodayhacker.com/dvga-walkthrough/>DVGA walkthrough</a></li><li><a href=https://zerodayhacker.com/vampi-walkthrough/>VAmPI walkthrough</a></li></ul><h3 id=bola--idor>BOLA / IDOR</h3><ul><li><a href=https://infosecwriteups.com/cracking-encrypted-credit-card-numbers-exposed-by-api-977c6f7b996f>Cracking Encrypted Credit Card Numbers Exposed By API</a></li><li><a href=https://infosecwriteups.com/what-is-bola-3-digit-bounty-from-topcoder-a25e7fae0d64>What is BOLA? 3-digit bounty from Topcoder</a></li><li><a href=https://danaepp.com/attacking-predictable-guids-when-hacking-apis>Attacking predictable GUIDs when hacking APIs</a></li></ul><h3 id=oauth>OAuth</h3><ul><li><a href=https://hackerone.com/reports/131202>Chained Bugs to Leak Victim&rsquo;s Uber&rsquo;s FB Oauth Token</a></li><li><a href=https://hackerone.com/reports/2575>Slack OAuth2 &ldquo;redirect_uri&rdquo; Bypass</a></li><li><a href=https://hackerone.com/reports/131202>Steal OAuth Tokens</a></li><li><a href=https://hackerone.com/reports/861940>OAuth redirect_uri bypass using IDN homograph attack resulting in user&rsquo;s access token leakage</a></li><li><a href=https://hackerone.com/reports/405100>Stealing Users OAUTH Tokens via redirect_uri</a></li><li><a href=https://hackerone.com/reports/665651>Stealing Users OAuth Tokens through redirect_uri parameter</a></li></ul><h3 id=jwt>JWT</h3><ul><li><a href=https://hackerone.com/reports/896649>Predictable JWT secret</a></li></ul><h3 id=rate-limit>Rate Limit</h3><ul><li><a href=https://bilalabdulmuqeet.medium.com/brute-forcing-otp-via-bypassing-rate-limit-c5ee6b25c2a8>OTP brute-force via rate limit bypass</a></li></ul><h3 id=ssrf>SSRF</h3><ul><li><a href=https://salt.security/blog/api-threat-research-server-side-request-forgery-on-fintech-platform-enabled-administrative-account-takeover>Server-side Request Forgery on FinTech Platform Enabled Administrative Account Takeover</a></li></ul><h2 id=testing>Testing</h2><ul><li><a href=https://tavern.readthedocs.io/en/latest/>Tavern API Testing</a></li><li><a href=https://github.com/RUB-NDS/REST-Attacker>REST-Attacker</a></li></ul></div></main><footer><p class="copyright text-muted">© All rights reserved. Powered by <a href=https://gohugo.io>Hugo</a> and <a href=https://github.com/calintat/minimal>Minimal</a>.</p></footer></body></html>
\ No newline at end of file
+<span class=icon-bar></span></button></div><div class="collapse navbar-collapse"><ul class="nav navbar-nav"><li><a href=/MindAPI/>Home</a></li><li><a href=/MindAPI/about/>About</a></li><li><a href=/MindAPI/references/>References</a></li><li><a href=/MindAPI/play/>Play</a></li><li role=presentation class=dropdown><a class=dropdown-toggle data-toggle=dropdown href=# role=button aria-haspopup=true aria-expanded=false href=#download>Download<span class=caret></span></a><ul class=dropdown-menu><li><a id=download-interactive href=#download-interactive>Interactive HTML</a></li></ul></li></ul><ul class="nav navbar-nav navbar-right"><li class=navbar-icon><a href=mailto:davidsopas@gmail.com><i class="fas fa-envelope"></i></a></li><li class=navbar-icon><a href=https://github.com/dsopas/MindAPI><i class="fab fa-github"></i></a></li><li class=navbar-icon><a href=https://twitter.com/dsopas/><i class="fab fa-twitter"></i></a></li></ul></div></div></nav><main><div><h2>References</h2><h5></h5></div><div align=start class=content><p>Here you can find a variaty of resources to help you out on the API security path.</p><h2 id=talks--educational-videos--recorded-webinars>Talks / Educational Videos / Recorded Webinars</h2><ul><li><a href="https://www.youtube.com/watch?v=Jmyl6GoTaao">OWASP API Security Top 10 by Erez Yalon & Inon Shkedy</a></li><li><a href="https://www.youtube.com/watch?v=0ei3CdD7Ebk">Meetups at Checkmarx: An Introduction to API Security</a></li><li><a href="https://www.youtube.com/watch?v=wY6q583JWLc">Meetups at Checkmarx: API Security Concerns (Part II)</a></li><li><a href="https://www.youtube.com/watch?v=NStTnATSysY">Don’t Worry, Be API: Addressing AppSec’s Newest Challenge</a></li><li><a href="https://www.youtube.com/watch?v=YQzU8xEBiPg">Common API security pitfalls by Philippe De Ryck</a></li><li><a href="https://www.youtube.com/watch?v=_WdDq9miqyo">API (in)Security TOP 10: Guided tour</a></li><li><a href="https://www.youtube.com/watch?v=aQGbYfalRTA">Top 10 API Bugs (and Where to Find Them)</a></li><li><a href="https://www.youtube.com/watch?v=fvcKwUS4PTE">How To Do Recon: API Enumeration</a></li><li><a href="https://www.youtube.com/watch?v=viWzbPuGqpo">Hunting for bugs in GraphQL APIs (Demo)</a></li><li><a href="https://www.youtube.com/watch?v=jyjGneKJynk">Finding Your Next Bug: GraphQL</a></li><li><a href="https://www.youtube.com/watch?v=NPDp7GHmMa0">REST in Peace: Abusing GraphQL to Attack Underlying Infrastructure</a></li><li><a href="https://www.youtube.com/watch?v=jBi3a-dXsM8">Hidden in Plain Site: Disclosing Information via Your APIs</a></li><li><a href="https://www.youtube.com/watch?v=UT7-ZVawdzA">Bad API, hAPI Hackers!</a></li><li><a href="https://www.youtube.com/watch?v=ijalD2NkRFg">API Security 101</a></li><li><a href="https://www.youtube.com/watch?v=zWVRHK3ykfo">JWT Parkour</a></li><li><a href="https://www.youtube.com/watch?v=yCUQBc2rY9Y">Finding Your First Bug: Finding Bugs Using APIs</a></li><li><a href="https://www.youtube.com/watch?v=cWSu2Ja65Z4">Live API Hacking Demo</a></li><li><a href="https://www.youtube.com/watch?v=NtAnyDJhkkg">OAuth, JWT, HMAC, oh my! API security for your enterprise</a></li><li><a href="https://www.youtube.com/watch?v=hNs8fpWfcyU">API Recon with Kiterunner</a></li><li><a href="https://www.youtube.com/watch?v=eKj8F9bOOvk">Offensive GraphQL API Exploitation</a></li><li><a href="https://www.youtube.com/watch?v=f5IEe5r9to8">Traversing My Way in the Internal Network</a></li><li><a href="https://www.youtube.com/watch?v=BTlUEWHRldk">API Hacking With ChatGPT!</a></li><li><a href="https://www.youtube.com/watch?v=1PjKr4ZZ6Ww">Web Apps: APIs’ Nightmare</a></li><li><a href="https://www.youtube.com/watch?v=ccmQXJcc1co">The Secret Life of APIs: Latest Attack Data Shows What Your APIs Are Doing</a></li><li><a href="https://www.youtube.com/watch?v=9kSBsyLqFgY">I’m an API Hacker and Here’s How I Hack Everything from the Military to AI</a></li><li><a href="https://www.youtube.com/watch?v=EQaGHjMIcD8">The Arazzo Specification: A Tapestry for API Workflows.</a></li></ul><h2 id=must-read>Must read</h2><ul><li><a href=https://owasp.org/www-project-api-security/>OWASP API Security Project</a></li><li><a href=https://cheatsheetseries.owasp.org/cheatsheets/GraphQL_Cheat_Sheet.html>GraphQL Cheat Sheet</a></li><li><a href=https://github.com/shieldfy/API-Security-Checklist>API Security Checklist</a></li><li><a href=https://apisecurity.io/encyclopedia/content/api-security-encyclopedia.htm>API Security Encyclopedia</a></li><li><a href=https://github.com/inonshk/31-days-of-API-Security-Tips>31 days of API Security Tips</a></li><li><a href=https://www.microsoft.com/en-us/research/uploads/prod/2018/04/restler.pdf>REST-ler: Automatic Intelligent REST API Fuzzing</a></li><li><a href=https://www.bugcrowd.com/blog/how-to-find-idor-insecure-direct-object-reference-vulnerabilities-for-large-bounty-rewards/>How-To: Find IDOR (Insecure Direct Object Reference) Vulnerabilities for large bounty rewards</a></li><li><a href=https://medium.com/swlh/hacking-json-web-tokens-jwts-9122efe91e4a>Hacking JSON Web Tokens (JWTs)</a></li><li><a href=https://huzaifa-tahir.medium.com/methods-to-bypass-rate-limit-5185e6c67ecd>Methods to Bypass Rate Limit</a></li><li><a href=https://github.com/odomojuli/RegExAPI>Regex For Finding Popular Keys</a></li><li><a href=https://www.nopsec.com/leveraging-exposed-wadl-xml-in-burp-suite/>Leveraging Exposed WADL XML in Burp Suite</a></li><li><a href=https://www.trendmicro.com/en_us/research/20/h/how-unsecure-grpc-implementations-can-compromise-apis.html>How Unsecure gRPC Implementations Can Compromise APIs</a></li><li><a href=https://blog.davidvassallo.me/2018/10/17/pentesting-grpc-protobuf-decoding-first-steps/>Pentesting gRPC / Protobuf : Decoding First steps</a></li><li><a href=https://portswigger.net/web-security/oauth>OAuth 2.0 authentication vulnerabilities</a></li><li><a href=https://threat.tevora.com/finding-broken-access-controls/>Finding Broken Access Controls</a></li><li><a href=https://blog.assetnote.io/2021/04/05/contextual-content-discovery/>Contextual Content Discovery: You&rsquo;ve forgotten about the API endpoints</a></li><li><a href=https://assets.pentesterlab.com/jwt_security_cheatsheet/jwt_security_cheatsheet.pdf>JWT Security Cheatsheet</a></li><li><a href=https://blog.yeswehack.com/yeswerhackers/how-exploit-graphql-endpoint-bug-bounty/>How to exploit GraphQL endpoint: introspection, query, mutations & tools</a></li><li><a href=https://www.binarybrotherhood.io/oauth2_threat_model.html>OAuth 2.0 Threat Model Pentesting Checklist</a></li><li><a href=https://blog.shiftleft.io/api-security-101-broken-user-authentication-1df2ef3420d8>API Security 101: Broken User Authentication</a></li><li><a href=https://www.xmind.net/m/CSKSWZ/>IDOR Techniques Mindmap</a></li><li><a href=https://www.tenchisecurity.com/blog/thefaultinourstars>Security Implications of AWS API Gateway Lambda Authorizers and IAM Wildcard Expansion</a></li><li><a href=https://joonas.fi/2021/08/saml-is-insecure-by-design/>SAML is insecure by design</a></li><li><a href=https://labs.detectify.com/2021/08/10/how-to-hack-apis-in-2021/>How to Hack APIs in 2021</a></li><li><a href=https://blog.assetnote.io/2021/08/29/exploiting-graphql/>Exploiting GraphQL</a></li><li><a href=https://wundergraph.com/blog/the_complete_graphql_security_guide_fixing_the_13_most_common_graphql_vulnerabilities_to_make_your_api_production_ready>The complete GraphQL Security Guide: Fixing the 13 most common GraphQL Vulnerabilities to make your API production ready</a></li><li><a href=https://bevigil.com/blog/exposed-payment-integration-api-keys-imperil-millions-of-users-transaction-details-and-pii/>Exposed Payment Integration API Keys Imperil Millions of Users’ Transaction Details and PII</a></li><li><a href=https://checkmarx.com/blog/move-over-verbose-error-messages-graphql-apis-are-here/>Move Over Verbose Error Messages, GraphQL APIs are Here</a></li><li><a href=https://checkmarx.com/blog/whats-old-becomes-new-again-csrf-attacks-on-graphql-apis/>What’s Old Becomes New Again: CSRF Attacks on GraphQL APIs</a></li><li><a href=https://checkmarx.com/blog/exploiting-graphql-query-depth/>Exploiting GraphQL Query Depth</a></li><li><a href=https://checkmarx.com/blog/alias-and-directive-overloading-in-graphql/>Alias and Directive Overloading in GraphQL</a></li><li><a href=https://checkmarx.com/blog/didnt-notice-your-rate-limiting-graphql-batching-attack/>Didn’t Notice Your Rate Limiting: GraphQL Batching Attack</a></li><li><a href=https://hookdeck.com/webhooks/guides/best-practices-deploy-webhooks-production>Best Practices When Deploying Webhooks in Production</a></li><li><a href=https://spec.openapis.org/arazzo/latest.html>The Arazzo Specification</a></li></ul><h2 id=practice>Practice</h2><ul><li><a href=https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application>Damn Vulnerable GraphQL Application</a></li><li><a href=https://github.com/marmicode/websheep>Websheep</a></li><li><a href=https://github.com/DevSlop/Pixi>Pixi</a></li><li><a href=https://github.com/NeilMadden/apisecurityinaction>API Security in Action</a></li><li><a href=https://github.com/roottusk/vapi>vAPI</a></li><li><a href=https://github.com/koenbuyens/Vulnerable-OAuth-2.0-Applications>vulnerable OAuth 2.0 applications</a></li><li><a href=https://github.com/h-a-c/jwt-lab>Vulnerable JWT lab</a></li><li><a href=https://github.com/CarveSystems/vulnerable-graphql-api>Vulnerable GraphQL API</a></li><li><a href=https://application.security/free/owasp-top-10-API>KONTRAs OWASP Top 10 for API</a></li><li><a href=https://github.com/InsiderPhD/Generic-University>Vulnerable API with Laravel App</a></li><li><a href=https://github.com/Checkmarx/capital>c{api}tal</a></li><li><a href=https://github.com/parasoft/parabank>ParaBank</a></li><li><a href=https://github.com/erev0s/VAmPI/>VAmPI</a></li><li><a href=https://github.com/theowni/Damn-Vulnerable-Restaurant-API-Game>Damn Vulnerable Restaurant</a></li></ul><h2 id=writeups>Writeups</h2><ul><li><a href=https://spongebhav.medium.com/facebook-group-members-disclosure-e53eb83df39e>Facebook Group Members Disclosure</a></li><li><a href=https://www.pingsafe.ai/blog/how-we-could-have-listened-to-anyones-call-recordings>How we could have listened to anyone&rsquo;s call recordings</a></li><li><a href=https://thezerohack.com/how-i-might-have-hacked-any-microsoft-account>How I Might Have Hacked Any Microsoft Account</a></li><li><a href=https://www.pingsafe.ai/blog/hacking-truecallers-guardian-application-to-track-you>How we could have tracked anyone&rsquo;s live location using Truecaller&rsquo;s &ldquo;Guardians&rdquo; app</a></li><li><a href="https://ysamm.com/?p=629">Enumerate internal cached URLs which lead to data exposure</a></li><li><a href=https://alissaknight.medium.com/all-that-we-let-in-hacking-mhealth-apps-and-apis-part-2-1a55b928ce67>All That We Let In: Hacking mHealth Apps and APIs</a></li><li><a href=https://www.pentestpartners.com/security-blog/tour-de-peloton-exposed-user-data/>Tour de Peloton: Exposed user data</a></li><li><a href=https://www.pentestpartners.com/security-blog/smart-car-chargers-plug-n-play-for-hackers/>Smart car chargers. Plug-n-play for hackers?</a></li><li><a href=https://www.wordfence.com/blog/2021/08/xss-vulnerability-patched-in-seopress-affects-100000-sites/>XSS Vulnerability Patched in SEOPress Affects 100,000 sites</a></li><li><a href=https://blog.usamav.dev/two-account-takeover-bugs-worth-4300-dollar-bounty>Two account takeover bugs worth $4300</a></li><li><a href=https://robertheaton.com/bumble-vulnerability/>Vulnerability in Bumble dating app reveals any user&rsquo;s exact location</a></li><li><a href=https://infosecwriteups.com/this-is-how-i-was-able-to-see-private-archived-posts-stories-of-users-on-instagram-without-de70ca39165c>This is how I was able to see Private, Archived Posts/Stories of users on Instagram without following them</a></li><li><a href=https://www.pentestpartners.com/security-blog/free-brewdog-beer-with-a-side-order-of-shareholder-pii/>Free BrewDog beer with a side order of shareholder PII?</a></li><li><a href=https://www.wordfence.com/blog/2022/01/unauthenticated-xss-vulnerability-patched-in-html-email-template-designer-plugin/>Unauthenticated XSS Vulnerability Patched in HTML Email Template Designer Plugin</a></li><li><a href=https://www.pentestpartners.com/security-blog/dpd-package-sniffing/>DPD package sniffing</a></li><li><a href=https://medium.com/@damaidec/idor-vulnerability-on-invoice-and-weak-password-reset-leads-to-account-take-over-603b42143a8c>IDOR vulnerability on invoice and weak password reset leads to account take over</a></li><li><a href=https://www.rapid7.com/blog/post/2022/11/16/cve-2022-41622-and-cve-2022-41800-fixed-f5-big-ip-and-icontrol-rest-vulnerabilities-and-exposures/>F5 BIG-IP and iControl REST Vulnerabilities and Exposures</a></li><li><a href=https://www.troyhunt.com/how-spoutibles-leaky-api-spurted-out-a-deluge-of-personal-data/>How Spoutible’s Leaky API Spurted out a Deluge of Personal Data</a></li><li><a href=https://iter.ca/post/gh-sig-pwn/>Forging signed commits on GitHub</a></li><li><a href=https://zerodayhacker.com/crapi-walkthrough-using-ai/>crAPI walkthrough using AI</a></li><li><a href=https://zerodayhacker.com/parabank-walkthrough/>ParaBank walkthrough</a></li><li><a href=https://zerodayhacker.com/capital-walkthrough/>c{api}tal walkthrough</a></li><li><a href=https://zerodayhacker.com/vapi-walkthrough/>vAPI walkthrough</a></li><li><a href=https://zerodayhacker.com/dvga-walkthrough/>DVGA walkthrough</a></li><li><a href=https://zerodayhacker.com/vampi-walkthrough/>VAmPI walkthrough</a></li></ul><h3 id=bola--idor>BOLA / IDOR</h3><ul><li><a href=https://infosecwriteups.com/cracking-encrypted-credit-card-numbers-exposed-by-api-977c6f7b996f>Cracking Encrypted Credit Card Numbers Exposed By API</a></li><li><a href=https://infosecwriteups.com/what-is-bola-3-digit-bounty-from-topcoder-a25e7fae0d64>What is BOLA? 3-digit bounty from Topcoder</a></li><li><a href=https://danaepp.com/attacking-predictable-guids-when-hacking-apis>Attacking predictable GUIDs when hacking APIs</a></li></ul><h3 id=oauth>OAuth</h3><ul><li><a href=https://hackerone.com/reports/131202>Chained Bugs to Leak Victim&rsquo;s Uber&rsquo;s FB Oauth Token</a></li><li><a href=https://hackerone.com/reports/2575>Slack OAuth2 &ldquo;redirect_uri&rdquo; Bypass</a></li><li><a href=https://hackerone.com/reports/131202>Steal OAuth Tokens</a></li><li><a href=https://hackerone.com/reports/861940>OAuth redirect_uri bypass using IDN homograph attack resulting in user&rsquo;s access token leakage</a></li><li><a href=https://hackerone.com/reports/405100>Stealing Users OAUTH Tokens via redirect_uri</a></li><li><a href=https://hackerone.com/reports/665651>Stealing Users OAuth Tokens through redirect_uri parameter</a></li></ul><h3 id=jwt>JWT</h3><ul><li><a href=https://hackerone.com/reports/896649>Predictable JWT secret</a></li></ul><h3 id=rate-limit>Rate Limit</h3><ul><li><a href=https://bilalabdulmuqeet.medium.com/brute-forcing-otp-via-bypassing-rate-limit-c5ee6b25c2a8>OTP brute-force via rate limit bypass</a></li></ul><h3 id=ssrf>SSRF</h3><ul><li><a href=https://salt.security/blog/api-threat-research-server-side-request-forgery-on-fintech-platform-enabled-administrative-account-takeover>Server-side Request Forgery on FinTech Platform Enabled Administrative Account Takeover</a></li></ul><h2 id=testing>Testing</h2><ul><li><a href=https://tavern.readthedocs.io/en/latest/>Tavern API Testing</a></li><li><a href=https://github.com/RUB-NDS/REST-Attacker>REST-Attacker</a></li></ul></div></main><footer><p class="copyright text-muted">© All rights reserved. Powered by <a href=https://gohugo.io>Hugo</a> and <a href=https://github.com/calintat/minimal>Minimal</a>.</p></footer></body></html>
\ No newline at end of file
diff --git a/tags/index.html b/tags/index.html
index 842a643..36a0fa7 100644
--- a/tags/index.html
+++ b/tags/index.html
@@ -1,4 +1,4 @@
-<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Tags</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.127.0"><link href=/MindAPI/tags/index.xml rel=alternate type=application/rss+xml title=MindAPI><link href=/MindAPI/tags/index.xml rel=feed type=application/rss+xml title=MindAPI><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>Tags</a>
+<!doctype html><html lang=en-us><head><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Tags</title><style>html body{font-family:blinker,sans-serif;background-color:#fff}:root{--accent:red;--border-width:5px}</style><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/main.css><link rel=stylesheet href=https://dsopas.github.io/MindAPI/css/custom.css><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Blinker"><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/default.min.css><link rel=stylesheet href=https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css crossorigin=anonymous><link rel=stylesheet href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css integrity="sha512-+4zCK9k+qNFUR5X+cKL9EIR+ZOhtIloNl9GIKS57V1MyNsYpYcUrUeQc9vNfzsWfV28IaLL3i96P9sdNyeRssA==" crossorigin=anonymous><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/highlight.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/go.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/haskell.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/kotlin.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/scala.min.js></script><script src=https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/languages/swift.min.js></script><script>hljs.initHighlightingOnLoad()</script><script src=https://cdn.jsdelivr.net/npm/d3@6></script><script src=https://cdn.jsdelivr.net/npm/markmap-lib@0.11.6></script><script src=https://cdn.jsdelivr.net/npm/markmap-view@0.2.6></script><script src=https://dsopas.github.io/MindAPI/js/mindmap.js></script><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integrity=sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossorigin=anonymous></script><script>$(document).on("click",function(){$(".collapse").collapse("hide")})</script><meta name=generator content="Hugo 0.128.0"><link href=/MindAPI/tags/index.xml rel=alternate type=application/rss+xml title=MindAPI><link href=/MindAPI/tags/index.xml rel=feed type=application/rss+xml title=MindAPI><script type=text/javascript async src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script></head><body><nav class="navbar navbar-default navbar-fixed-top"><div class=container><div class=navbar-header><a class="navbar-brand visible-xs" href=#>Tags</a>
 <button class=navbar-toggle data-target=.navbar-collapse data-toggle=collapse>
 <span class=icon-bar></span>
 <span class=icon-bar></span>
