Learning on Web Dev Open is free for all.

Backend Engineering > Who is asking, and what may they doBreak your own API
Phase 05Who is asking, and what may they do267 of 434

Break your own API

An hour attacking the thing you just built, with a written list of what you found and what you did about it.

Build45 minAI adversary

Build this in your own editor

This one runs on your machine rather than in the browser workbench. Work to the outcomes below, then come back and mark it complete.

You should now be able to

  • Attempt authorisation bypass on your own routes
  • Test input handling with hostile payloads
  • Write up the findings honestly, including the ones you have not fixed
Ask the community

Loading…

← PreviousThe five that actually hit web appsWho is asking, and what may they doNext →Not everything belongs in the requestWork that outlives the request