Accidental exposure of private GraphQL fields
Laboratorio de Portswigger sobre GraphQL API Vulnerabilities
Justice-Reaper
Accessing private GraphQL posts
Laboratorio de Portswigger sobre GraphQL API Vulnerabilities
Authentication bypass via encryption oracle
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Infinite money logic flaw
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Authentication bypass via flawed state machine
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Insufficient workflow validation
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Weak isolation on dual-use endpoint
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Inconsistent handling of exceptional input
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Low-level logic flaw
Laboratorio de Portswigger sobre Business Logic Vulnerabilities
Manipulating the WebSocket handshake to exploit vulnerabilities
Laboratorio de Portswigger sobre WebSocket Attacks