The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
API Security Assessment - REST and GraphQL Endpoints
Performed a black-box API security assessment covering REST and GraphQL endpoints for a fintech platform. Identified BOLA/IDOR vulnerabilities allowing unauthorized access to other users financial data, mass assignment flaws exposing admin-only fields, broken function-level authorization on privileged endpoints, and GraphQL introspection exposing internal schema. Also found SSRF via webhook URL parameter and JWT algorithm confusion (RS256 to HS256).
Delivered OWASP API Top 10 aligned report with curl-based PoC for each finding and remediation guidance.
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
Cybersecurity tools can feel overwhelming for small teams.
Shielda explores a cleaner dashboard experience that helps businesses monitor their digital footprint across domains, email, and social channels.
The interface surfaces password leaks, phishing clones, suspicious mentions, and brand abuse through a clear Security Score, compact threat cards, severity tags, and AI-powered summaries.
Instead of forcing users to interpret complex security data, Shielda helps them understand what happened, how serious it is, and what to do next.
CryptoScout is a Telegram crypto assistant that provides users with tools for checking wallets and tokens, monitoring portfolios, and accessing useful crypto information directly through Telegram.
NEXA is a modern crypto portfolio dashboard designed to provide a clear overview of digital assets, portfolio performance, market data, and key statistics in one interface.
