BiteSizedChunks.comLearn one small thing at a time.

Course contentsShow

990REST API Attack Surface and Reconnaissance
991Broken Object Level Authorization in REST APIs
992Broken Function Level Authorization
993Mass Assignment Vulnerabilities in REST APIs
994Excessive Data Exposure in API Responses
995API Parameter Pollution and Injection
996HTTP Method Tampering and Verb Confusion
997Content-Type and Accept Header Exploits
998API Versioning and Legacy Endpoint Vulnerabilities
999GraphQL Architecture and Security Implications
1000GraphQL Introspection and Information Disclosure

990REST API Attack Surface and Reconnaissance
991Broken Object Level Authorization in REST APIs
992Broken Function Level Authorization
993Mass Assignment Vulnerabilities in REST APIs
994Excessive Data Exposure in API Responses
995API Parameter Pollution and Injection
996HTTP Method Tampering and Verb Confusion
997Content-Type and Accept Header Exploits
998API Versioning and Legacy Endpoint Vulnerabilities
999GraphQL Architecture and Security Implications
1000GraphQL Introspection and Information Disclosure

Lesson 996 of 3,052·21. Web Security - API SecurityPro lesson

HTTP Method Tampering and Verb Confusion

Test whether APIs properly restrict HTTP methods and handle method override headers like X-HTTP-Method-Override.

This lesson is for subscribers

You've completed the free preview. Subscribe to unlock every lesson in every course.

See pricing Back to course