Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Attacking APIs — Skills Assessment Writeup

Introduction Walking through my solve of the Attacking APIs Skills Assessment. This one chains weak authentication flows, insecure password reset mechanisms, and a classic SSRF/Local File Inclusion…

  • Exploited authentication weaknesses to obtain JWT
  • Exploited insecure password reset mechanism to change flag
  • Identified and exploited file inclusion vulnerability

More from Thursday 1 October →