IEEE/ICACT20220047 Slide.11        [Big Slide]       Oral Presentation
The first method, endpoint detection by combining paths, combines the base path and candidate keys in order to estimate endpoints that are not described in the reference. Send a GET request to generated endpoints. No.1 is a vulnerability caused by the use of an endpoint that is not described in the reference, so make sure that the generated endpoint is not described in the reference. The vulnerability is determined by checking the response for HTTP status codes other than the 400 series, which indicate that the request was not processed successfully.

[Go to Next Slide]
Select Voice: