41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0c505-7128-71a7-be72-6a982ca37cb0

Fuzzing JSON to find API security flaws

danaepp.com · published 16 July 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at danaepp.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 11
Words captured: 1,346

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://owasp.org/API-Security/editions/2019/en/0xa6-mass-assignment/

owasp.org

Finding hidden API parameters Read at the source ↗

https://portswigger.net/bappstore/17d2949a985c4b7ca092728dba871943

portswigger.net

https://github.com/danielmiessler/SecLists

github.com

https://wordlists.assetnote.io/

wordlists.assetnote.io

A “cewl” way for API discovery Read at the source ↗

https://spec.openapis.org/oas/latest.html

spec.openapis.org

https://tools.ietf.org/html/draft-bhutton-json-schema-00

tools.ietf.org

How to extract artifacts from OpenAPI docs to help attack APIs Read at the source ↗

https://github.com/OWASP/crAPI

github.com

Tracing API exploitability through code review and taint analysis Read at the source ↗