BiteSizedChunks.comLearn one small thing at a time.

Course contentsShow

990REST API Attack Surface and Reconnaissance
991Broken Object Level Authorization in REST APIs
992Broken Function Level Authorization
993Mass Assignment Vulnerabilities in REST APIs
994Excessive Data Exposure in API Responses
995API Parameter Pollution and Injection
996HTTP Method Tampering and Verb Confusion
997Content-Type and Accept Header Exploits
998API Versioning and Legacy Endpoint Vulnerabilities
999GraphQL Architecture and Security Implications
1000GraphQL Introspection and Information Disclosure

990REST API Attack Surface and Reconnaissance
991Broken Object Level Authorization in REST APIs
992Broken Function Level Authorization
993Mass Assignment Vulnerabilities in REST APIs
994Excessive Data Exposure in API Responses
995API Parameter Pollution and Injection
996HTTP Method Tampering and Verb Confusion
997Content-Type and Accept Header Exploits
998API Versioning and Legacy Endpoint Vulnerabilities
999GraphQL Architecture and Security Implications
1000GraphQL Introspection and Information Disclosure

Lesson 1000 of 3,052·21. Web Security - API SecurityPro lesson

GraphQL Introspection and Information Disclosure

Examining schema introspection queries, how attackers enumerate the complete API surface, and when to disable introspection in production.

This lesson is for subscribers

You've completed the free preview. Subscribe to unlock every lesson in every course.

See pricing Back to course