Completed
Authorization
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
REST in Peace - Abusing GraphQL to Attack Underlying Infrastructure
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Agenda
- 3 What is GraphQL
- 4 Cons of GraphQL
- 5 Increased Complexity
- 6 Documentation
- 7 Motivation
- 8 New Attack Methodology
- 9 How to Get
- 10 Validation
- 11 Object Reference Attacks
- 12 Mutations
- 13 New Data
- 14 Debug Mode
- 15 GARP
- 16 Rust API
- 17 Hackers get paid
- 18 A typical problem in software development
- 19 API mightyfall
- 20 Find the Endpoints
- 21 Make Requests
- 22 Debugging Data
- 23 Voyager
- 24 Fluent Leverage
- 25 Query
- 26 Mutation
- 27 Authorization
- 28 Thread Messages
- 29 The Real Problem
- 30 Query Cost Analysis
- 31 AWS Security Toolkit
- 32 GraphQL Verb Extension
- 33 Sequel Map
- 34 Do you have time
