Web Security Academy Solutions
Ctrlk
  • Server-Side Topics
    • NoSQL Injection
    • Race Conditions
    • Web Cache Deception
    • API Testing
      • Lab: Exploiting an API endpoint using documentation
      • Lab: Finding and exploiting an unused API endpoint
      • Lab: Exploiting a mass assignment vulnerability
      • Lab Exploiting server side parameter pollution in a query string
      • Lab: Exploiting server side parameter pollution in a REST URL
  • Advanced Topics
Powered by GitBook
On this page
  1. Server-Side Topics

API Testing

Lab: Exploiting an API endpoint using documentationLab: Finding and exploiting an unused API endpointLab: Exploiting a mass assignment vulnerabilityLab Exploiting server side parameter pollution in a query stringLab: Exploiting server side parameter pollution in a REST URL
PreviousLab: Exploiting exact match cache rules for web cache deceptionNextLab: Exploiting an API endpoint using documentation