hunt-api-misconfig

API security misconfigurations are detected by analyzing API responses and header information to identify JWT flaws, prototype pollution, CORS issues, and OData WAF bypasses. The skill targets mass assignment, weak HMAC, and token confusion.

Common JWT vulnerabilities include weak HMAC implementations, kid path traversal, and token confusion. You identify them by analyzing JWT tokens within your API authentication responses to discover these specific cryptographic and structural weaknesses.

Prototype pollution vulnerabilities are identified by analyzing JSON merge operations within API payloads. Testing involves scanning API request parameters and response bodies to detect potential malicious property injections affecting object prototypes.

Yes, it detects OData-based attacks including WAF blacklisting bypasses and SQL injection vulnerabilities. It analyzes OData query parameters within API requests to identify malicious payloads evading security filters.

Testing CORS misconfigurations requires detailed analysis of API response headers. It checks Access-Control-Allow-Origin and related headers to detect unauthorized cross-origin access policies and insecure credential handling.

HTTP verb tampering exploits API endpoints by using alternative HTTP methods to bypass access controls. It is detected by analyzing API responses to unexpected verbs, exposing underlying security misconfigurations and authorization weaknesses.