Skip to content
What Vuln Scanners Miss in API Testing
bugcrowd.com | tool | #access-control | #api-security | #vulnerability-scanning | #bugcrowd | #authorization | #automated-testing | #broken-authorization
Summary
Luke Stephens shows how automated checks miss broken API authorization: an endpoint can pass QA while leaking users' home addresses to unauthenticated callers due to untested role restrictions.
- Published
- Collected