Plug & play API security platform | Akto

API Security Tests

March 31, 2023

How to Test Mass Assignment in APIs using Akto

This blog is about learning mass assignment vulnerability, how to find it manually, how to test for it using Akto and finally how to prevent it.

January 31, 2023

How to test JWT NONE Algorithm vulnerability?

The JWT None algorithm attack is a type of vulnerability that arises when a JWT is signed

January 31, 2023

BOLA exploitation using unauthorized UUID on an API endpoint

A UUID (Universal Unique Identifier) is a standardized 128-bit format for identifying....

January 31, 2023

How to test for BOLA on an endpoint with weak enumerable user IDs?

An interesting test case where a weak user identifier can be used to perform a BOLA attack