关于
This skill provides a specialized workflow for security professionals and developers to conduct deep-dive API penetration testing and bug bounty hunting. It covers the entire lifecycle of an assessment, from initial reconnaissance and endpoint enumeration to advanced exploitation techniques for IDOR (Insecure Direct Object Reference), SQL injection, and GraphQL-specific vulnerabilities. By integrating industry-standard tools and best practices, it helps users systematically uncover authentication bypasses, rate-limiting gaps, and sensitive data exposure across diverse API architectures.
