Offensive security2 min read
Broken object-level authorisation: the API bug behind most data leaks
BOLA tops the OWASP API Security Top 10. How it happens in a typical NestJS API, how testers find it, and the pattern that prevents it.
Offensive security
API auth bypasses, mobile testing notes, filter bypasses.
Follow new posts by RSS.