46 tagged autonomous pentesting, measured the same way as everything else here.
Browse within: bug-bounty 46cybersecurity 46api-security 17binary-exploitation 9exploit-development 9owasp 9cloud-security 7
Skill Claude CodeCodex
Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative functions or access privileged API endpoints by directly calling them. The tester identifies admin and privileged endpoints, then attempts to access them with regular user credentials by manipulating…
Skill Claude CodeCodex
Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying on the frontend to filter sensitive fields. The tester intercepts API responses and analyzes them for leaked PII, internal identifiers, debug information, or sensitive business data that the UI does not…