simple endpoint POST1.png
Damian K. — Penetration Tester / Offensive Security Engineer
📢 Shared from RedNode Security
Simple endpoint.
Big problem.
Seen recently:
An API allowed querying user profiles using client-controlled identifiers.
Looked harmless.
→ turned into full user enumeration
→ data extraction at scale
→ cross-table correlation
No exploits.
No brute force.
Just broken assumptions.
Question:
Can users in your system list other users indirectly?
If yes — you might already have the first step of an attack chain.
2 reactions · 0 comments