skip to Main Content

LEVELUP 0x01

Hidden in Plain Site: Disclosing Information via Your APIs

By : Peter Yaworski

In this presentation, I’ll walk through a number of information disclosure vulnerabilities I’ve found in mature programs overlooked by other researchers specifically in HTML page sources and APIs. In doing so, I’ll demonstrate the design pattern in Rails that makes this an easy mistake to make, especially when combined with a front end JavaScript library like React or Angular.

Learn More About Security Testing Unlocked From a Joint Webinar With Bugcrowd And IOActive Register Now
+
Back To Top