testing-api-for-mass-assignment-vulnerability

【文档与办公】Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have access to by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the da…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准