This skill provides a comprehensive framework for identifying vulnerabilities in API endpoints, covering the full 2023 OWASP API Security Top 10. It guides users through discovery of hidden endpoints, testing for Broken Object Level Authorization (BOLA), evaluating authentication strengths, and detecting security misconfigurations. By combining automated fuzzing patterns with manual verification workflows, it empowers developers and security professionals to validate API gateway controls, rate limiting, and complex authorization logic across REST, GraphQL, and gRPC architectures.
주요 기능
01Authentication mechanism and JWT integrity validation
02Rate limiting and resource consumption stress testing
03Automated API endpoint discovery and mapping for REST and GraphQL
04Mass assignment and excessive data exposure checks
054,121 GitHub stars
06Systematic BOLA (Broken Object Level Authorization) and IDOR testing
