๐ข Today is the day! After about a year reverse engineering 4 different SSD controller brands, Xbox 360 HDD Maker is now available. For the first time, it is now possible to add an SSD to an unmodified, retail Xbox 360 console.
One of my favorite disclosed API breaches, discovered by my colleague @XeEaton
I highly recommend reading it on your laptop to see how your cursor turns into a French fries container.
https://t.co/9eSni5v4U8
Join me in person @ Cincinnati/online! We'll talk about:
๐Complex multi-step authorization breaches.
๐คBots: how bad actors exploit the API economy for profit.
๐Modern vs. Traditional: the shift away from traditional issues like injections, XSS, and XXE.
https://t.co/n6pvX5nxC1
-API Tip 28/30- #bugbountytip
Save time by comparing response sizes instead of response bodies.
E.g,
- Generate 2 API calls to test for IDOR/BOLA, use 2 different IDs
- 2 API responses have the same size? EP is probably not vulnerable
@Alder_Birch_ Two main exceptions I can think of:
1. EP doesn't return data about the accessed object. For example: DELETE /photo/22 might return just 200 with a JSON : {"status":"ok"}
2. If two different returned objects are exactly the same size. For example:
@Alder_Birch_ {"name":"inonsh":"age"28}
{"name":"boreal":"age"21}
// this one is less likely because usually JSON objects contain multiple params, and the likelihood of 2 objects to be the exact same size is low in most cases
-API Tip 30/30- #BugBounty
Feeling stuck but have to find a critical vulnerability?
1. Wake up early in the morning.
2. Meditate, do some exercise.
3. Turn off your phone, disconnect from the world for several hours, drink a coffee.
4. Dedicate yourself to the process :)