Discover Security Threats and Mitigations

Exploring vulnerabilities in a vulnerable app, we wrote account takeover test cases. The email input field triggered a request on each keystroke to check registration.

While freelancing for a company, We worked on their private employee dashboard, where employees could modify personal details. Managers, HR, and executives could view and communicate with any employee, but other employees couldn’t access personal details.

In this post, we explore GraphQL misconfigurations, including common attacks and practice labs. GraphQL is a query language for APIs, allowing flexible data queries and is backed by your existing code and data, independent of specific databases or storage engines.