Penetration Testing
Ctrlk
  • Web
    • Reconnaissance
    • Open Source Intelligence
    • Misconfiguration
    • Identity Management
    • Broken Authentication
    • Broken Authorization
    • Session Management
    • Input Validation
    • Error Handling
    • Weak Cryptography
    • Business Logic
    • Client Side
    • API Attacks
      • Broken Object Level Authorization
      • Broken Authentication
      • Excessive Data Exposure
      • Lack of Resources and Rate Limiting
      • Broken Function Level Authorization
      • Mass Assignment
      • Security Misconfiguration
      • Injection Attack
      • Improper Assets Management
      • Insufficient Logging and Monitoring
  • Mobile
    • Mobile App Taxonomy
    • Mobile App Security Testing
    • General
    • Android
    • iOS
  • Cloud
    • Reconnaissance
    • SaaS
    • IaaS
    • Azure
    • AWS
    • GCP
    • IBM
    • Digital Ocean
    • Kubernetes
    • CI/CD
    • Active Directory
  • Network
    • Introduction
    • Intelligence Gathering
    • Vulnerability Analysis
    • Logical Vulnerabilities
    • Exploitation of Remote Services (User-Mode)
    • Exploitation of Remote Services (Kernel-Mode)
  • Wireless
    • Page 4
  • iot
    • Page 5
Powered by GitBook
On this page
  1. Web

API Attacks

Broken Object Level AuthorizationBroken AuthenticationExcessive Data ExposureLack of Resources and Rate LimitingBroken Function Level AuthorizationMass AssignmentSecurity MisconfigurationInjection AttackImproper Assets ManagementInsufficient Logging and Monitoring
PreviousReverse TabnabbingNextBroken Object Level Authorization

Last updated 2 years ago