CATEGORY 16 / 59

API REST

25 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.

C16-T001
source 7

Inventaire endpoints

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T002
source 7

Endpoints non documentés

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T003
source 7

Anciennes versions API

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T004
source 7

Authentification API

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T005
source 7

Autorisation objet

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T006
source 7

BOLA

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T007
source 7

BFLA

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T008
source 7

Mass assignment

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T009
source 7

Excessive data exposure

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T010
source 7

Validation entrées

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T011
source 7

Rate limiting

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T012
source 7

Pagination abusive

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T013
source 7

Enumeration

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T014
source 7

API keys exposées

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T015
source 7

Tokens expirés

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T016
source 7

Tokens révoqués

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T017
source 7

CORS API

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T018
source 7

Content-Type

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T019
source 7

JSON malformé

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T020
source 7

Verbes HTTP non nécessaires

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T021
source 7

OPTIONS

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T022
source 7

PUT

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T023
source 7

PATCH

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T024
source 7

DELETE

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C16-T025
source 7

TRACE

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope