API Exploits Explained: Using APIs to Execute a Server-Side Request Forgery
A note from Synack: API security scanners can be useful to quickly identify potential API vulnerabilities through automated means. Automated scans rely on known exploit paths to probe their target, for example by using HTTP response status codes. But the results of a scan don’t always tell the whole story of a potential API vulnerability. In one scenario, […]
