testing-api-for-broken-object-level-authorization

【开发与工程】Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces …

独立 GitHub 快照 · 自动分类 · 以原作者文档为准