How BOLA in API Endpoint can lead to Account Takeover | Postman | API Security

preview_player
Показать описание
How BOLA in API Endpoint can lead to Account Takeover | Postman | API Security |
.
.
This video covers how you can exploit a vulnerable API Endpoint to change another user's password without their interaction.
.
.
.
.
.
Like and Subscribe :)

Social media:

Blog:

#api #bugbounty #bola #postman #pentesting #api #hack #bola #tryhackme #hackerone #apihacking #computerscience #javascript #python #postman #ctf #bughunting #pentesting #hacking #hackingtools #burpsuite #portswigger #ethicalhacking #OAuth #webhacking #programming #websecurity #technology #practical #artificialintelligence #web #recon #bypass
Рекомендации по теме
Комментарии
Автор

What is even more crazy is that this is a very common API vulnerability.

didyouknowamazingfacts
Автор

Do you know prototype pollution? It will be really helpful if you managed to make a video on prototype pollution.

whoamipwns
Автор

I really appreciate your content and style of teaching, I have question, Is it BOLA or Broken user authentication I little confuse.

harshraj
Автор

I studied people who say account takeover happens in BFLA : (

iq_rasco
Автор

in real life scenario, This will never!!

finchking