Api Security Excessive Data Exposure I

Summary

Find the original here: youtu.be/CkVvB5woQRM // Free ... vulnerabilities: broken access control (BOLA/IDOR), trusting client input (mass assignment, Excessive data exposure occurs when applications tend to disclose more than desired ... Disclaimer: This video is only for educational purpose. Part 3 of crAPI Pentesting Series This video is about Exploiting Broken ... In this live-code session, Abhay talks about a common, but under-rated masterspark Threat agents/Attack vectors In this video, I demonstrate how to exploit the BOPLA vulnerability (Broken Object Property Level Authorization) using the VVMA ... The Field Problem: mass assignment lets an attacker add role=admin to a sign-up request, and I was browsing the repository documentation for the project and discovered that it actually has Swagger documentation 0:00 introduction 0:45 Exploits Hope you guys enjoyed the episode. For any questions feel free to ask them in section or on our social network. Useful Resources - Lab link - application.security/free-application-security-training/owasp-top-10-api-excessive-data ...