OWASP API Security Top 10 - 1

Walkthrough summary

OWASP API Security Top 10 - 1 TryHackMe walkthrough with 17 answered prompts and lab methodology notes.

Sample prompts covered

• In the LinkedIn breach (Jun 2021), how many million records (sample) were posted by a hacker on the dark web?
  Open the walkthrough page to inspect the full answer and command flow.
• Is the API documentation a trivial item and not used after API development (yea/nay)?
  Open the walkthrough page to inspect the full answer and command flow.
• Suppose the employee ID is an integer with incrementing value. Can you check through the vulnerable API endpoint the total number of employees in the company?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the flag associated with employee ID 2?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the username of employee ID 3?
  Open the walkthrough page to inspect the full answer and command flow.