BigHugger
sk Skill · mukul975

detecting-broken-object-property-level-authorization

Detect and test for OWASP API3:2023 Broken Object Property Level Authorization (BOPLA), covering excessive data exposure in API responses and mass assignment via injected request-body properties. Use when reviewing API responses/requests for over-exposed or over-writable object fields, or building detection rules and test cases for property-level authorization gaps that object-level checks miss.

installs 8w
0
30-day movement
starts with the next reading
Related entries
1
Connections
0
jsonhttpPythonpenetration-testingpythonproperty-level-authorizationexcessive-data-exposureapi-testingmass-assignmentowasp-api3boplaapi-security
Host repository
mukul975/Anthropic-Cybersecurity-Skills
Version
1.0
Licence
Apache-2.0
Host stars
33k
Host language
Python