h1thub

Unauthorized and Over-Privileged API Access Vulnerability: Harvesting All Usernames and Passwords

2

You can see in the figure below that the following API interface lacks authentication.(hithub is me) Iterate through the numbers in the figure below. By iterating through these numbers, you...