detecting-broken-object-property-level-authorization - Detect Broken Object Property-Level Authorization
Detects excessive data exposure and mass assignment vulnerabilities in APIs related to OWASP API3:2023.
Tags
Updated: 2026-09-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Detect excessive data exposure
- Test mass assignment
- Classify sensitive properties
- Verify property modifications
- Record vulnerability findings
Inputs
- Target API endpoints
- API documentation or schema
- Authentication headers
- Privilege-level user accounts
- Expected response fields
- Security testing authorization
Outputs
- Vulnerability findings
- Exposed property details
- Mass assignment results
- Modified test properties
Requirements
- Python 3.8 or later
- Python requests library
- Reachable target API
- Authorization for security testing