Exploits Explained: Using APIs to Execute a Server-Side Request Forgery

A note from Synack: API security scanners can be useful to quickly identify potential API vulnerabilities through automated means. Automated scans rely on known exploit paths to probe their target, for example by using HTTP response status codes. But the results of a scan don’t always tell the whole story of a potential API vulnerability.  In one scenario, […]

The post Exploits Explained: Using APIs to Execute a Server-Side Request Forgery appeared first on Synack.

api apis api security api security testing api vulnerabilities automated bugs and breaches don explained exploit exploits exploits explained featured forgery hackers http identify probe quickly request response results scan scanners scans security security scanners server server-side request forgery ssrf story synack synack red team target vulnerabilities