Tagged: Postman

April 25, 2024

Thousands of API Secrets Exposed on Postman – Are Your Credentials At Risk?

Postman, the tool beloved by developers for testing and building APIs, is unwittingly becoming a treasure trove for hackers. Security firm Truffle Security uncovered a shocking problem: thousands of live API keys, authentication tokens,...

Web Information Gathering

January 25, 2024

Porch Pirate: The most comprehensive Postman recon / OSINT client and framework

Porch Pirate Porch Pirate started as a tool to quickly uncover Postman secrets, and has slowly begun to evolve into a multi-purpose reconnaissance / OSINT framework for Postman. While existing tools are great proof...