Скачать или смотреть GraphQL Attacks in the Wild: IDOR, SQLi & More | PART 2

In this second part of my GraphQL hacking series, I dive into more real-world vulnerabilities like IDOR, SQL injection, OS command injection, and mutation abuse. These kinds of bugs show up in actual bug bounty programs, and they’re easier to find than you might think. If you're into API hacking or want to level up your GraphQL security skills, this one’s for you.
.
.
.
GraphQL Security Lab:
https://github.com/david3107/graphql-...
.
.
.
My Website: https://medusa0xf.com/
My Blog:   / medusa0xf  
.
.
.
Social media -
Twitter:   / medusa_0xf  
Discord:   / discord  
.
.
.
.
Intro: 0:00
Introspection Disabled Approach: 0:12
Clairvoyance: 1:57
Mutations Testing: 5:33
IDOR: 9:42
SQL Injection: 11:05
Blind OS Command Injection: 17:40
Final Thoughts: 21:45.
.
.
.
-------------------------------------------------------------
♪ Gift ( by massobeats)
Link:    • massobeats - gift (royalty free lofi music)  
--------------------------------------------------------------
♪ Honey Jam (by massobeats)
Link:    • massobeats - honey jam (royalty free lofi ...  
--------------------------------------------------------------
♪ Floral (by massobeats)
Link:    • massobeats - floral (royalty free lofi music)  
--------------------------------------------------------------
.
.
.
#owasp #graphql #apihacking #developer #hackerone #jwt #api #subdomain #portswigger #bugbounty #bola #postman #podcast #pentesting #api #hack #bola #tryhackme #hackerone #apihacking #computerscience #javascript #python #postman #ctf #bughunting #pentesting #hacking #hackingtools #burpsuite #portswigger #ethicalhacking #OAuth #webhacking #programming #websecurity #technology #practical #artificialintelligence #web #recon #bypass