akto

akto copied to clipboard

⛏️ Write a test to check whether we can create/update an object with invalid UPI Id

6

💭 Introduction: We want to test to check whether an attacker can create/update entity with an invalid UPI Id. 🎯 Requirements: 1. Filters - API with UPI ID as an...

ankush-jain-akto

⛏️ Write a test to check whether we can create/update an object with Parameter Exclusion

3

💭 Introduction: We want a test to check whether an attacker can create/update entity with Parameter exclusion. 🎯 Requirements: 1. Filters - API with atleast one parameter as an input...

arjun-akto

⛏️ Write a test to check whether we can create/update an object with File Upload

3

💭 Introduction: We want a test to check whether an attacker can create/update entity with File upload. 🎯 Requirements: 1. Filters - API with atleast one parameter as an input...

arjun-akto

⚡ Go to testing results after staring a test

4

💭 Introduction: After starting a test run from the api collection, there is no confirmation that the test has been started or not. 🎯 Requirements: - A good understanding of...

notshivansh

CLRF : Web Vulnerability

1

CRLF injection is a web application security vulnerability that allows an attacker to inject carriage return (CR) and line feed (LF) characters into an HTTP request or response. This can...

gl1tch0x1

📃 Write a blog post about creating automated inventory using Akto

23

# 💭 Introduction Akto is an open source API security product. Your task is to write a blog post about Akto's automated inventory feature. ### 🎯 Requirements - Your article...

Ankita28g

💭 Introduction: GraphQL has gained a lot of popularity and love from the dev world. Its flexibility is one of the most powerful features. At the same time, it makes...

ankush-jain-akto

💭 Introduction: 🎯 Requirements: ✅ Task summary: Write a test to exploit recursive query vulnerability. Read more about the vulnerability [here](https://yarnpkg.com/package/graphql-depth-limit) As part of this test, you will have to...

ankush-jain-akto

💭 Introduction: mass assignment - https://blog.yeswehack.com/yeswerhackers/how-exploit-graphql-endpoint-bug-bounty/ 📚 Reading You can find a detailed documentation of test editor rules [here](https://docs.akto.io/test-editor/test-yaml-syntax-detailed) Find 100+ examples of YAML tests [here](https://github.com/akto-api-security/tests-library) ✅ Task summary: -...

Ankita28g

💭 Introduction: We want to test whether API's which take in url as a param are vulnerable to do RCE on Redis using SSRF. You can refer [this](https://smarx.com/posts/2020/09/ssrf-to-redis-ctf-solution/) blog for...

aktoboy