BigHugger
sk Skill · mukul975

detecting-api-enumeration-attacks

Detect API enumeration attacks (BOLA/IDOR, OWASP API1:2023) by writing SIEM detection rules that flag sequential or UUID identifier iteration, parameter tampering, and mixed 200/401/403 response patterns from API gateway and WAF logs. Use when investigating suspected object-level authorization abuse, building threat-hunting queries for API access-control bypass, or hardening API logging/rate-limiting against…

installs 8w
0
30-day movement
starts with the next reading
Related entries
1
Connections
0
yamlsplpythonjsonPythonaccess-controlowasp-api-top-10rate-limitingbroken-object-level-authorizationbolaenumerationidorapi-security
Host repository
mukul975/Anthropic-Cybersecurity-Skills
Version
1.0
Licence
Apache-2.0
Host stars
33k
Host language
Python