Improper Asset Management
Last updated
Last updated
Search for older versions
Search for non production versions
Postman Collection Runner
collection options, choose Edit, and select the Tests tab
Run an unauthenticated baseline scan of the collection with the Collection Runner. Make sure that "Save Responses"
Next, use "Find and Replace" to turn the collection's current versions into a variable. Type the current version into "Find", update "Where" to the targeted collection, and update "Replace With" to a variable.
Open Postman and navigate to the environmental variables (use the eye icon located at the top right of Postman as a shortcut). Add a variable named "ver" to your Postman environment and set the initial value to "v1".
Use the collection runner again and investigate the results
I hope it helps you as much as it has helped me. If you can support me in any way, I would deeply appreciate it.
A crash course in web API security testing that will prepare you to penetration-test APIs, reap high rewards on bug bounty programs, and make your own APIs more secure.
This hands-on book teaches penetration testers how to identify vulnerabilities in apps that use GraphQL, a data query and manipulation language for APIs adopted by major companies like Facebook and GitHub.
