---
id: 3733
title: "Salesforce Penetration Testing Fundamentals"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/salesforce-penetration-testing-fundamentals/"
published_at: "2025-08-07 03:56"
tags: ["access-control", "penetration-testing", "salesforce", "soql-injection", "aura"]
phying_url: "https://phying.com/item/3733"
lang: en
---

# Salesforce Penetration Testing Fundamentals

## Summary

Salesforce penetration testing fundamentals: enumerate custom objects and fields for access-control issues, review Apex code for SOQL injection and IDORs, and dump objects with aura-dump.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2025-08-07 03:56
- **Original:** https://projectblack.io/blog/salesforce-penetration-testing-fundamentals/
- **Phying News:** https://phying.com/item/3733