API Scanning vs Traditional DAST with James Berthoty. Register Now.

Find your API Security Test

Jumpstart your API Security testing with our pre-built YAML tests. A library of 100+ API Security tests and growing everyday

Search…

Lack of Resources & Rate Limiting (RL)

lack-of-resources-rate-limiting

Bypass captcha based protection by removing cookie

Attackers can circumvent captcha protection by removing cookies compromising the system's security.

lack-of-resources-rate-limiting

Bypass captcha based protection by removing cookie

Attackers can circumvent captcha protection by removing cookies compromising the system's security.

Business Logic

lack-of-resources-rate-limiting

Bypass captcha based protection by adding headers

Attackers can circumvent captcha protection by adding headers like x-forwarded-for, compromising the system's security.

Business Logic

lack-of-resources-rate-limiting

Bypass captcha based protection by adding headers

Attackers can circumvent captcha protection by adding headers like x-forwarded-for, compromising the system's security.

lack-of-resources-rate-limiting

Remove Captcha from request

Ignoring CAPTCHA validation without the field present in the backend server can result in severe damage and vulnerabilities.

lack-of-resources-rate-limiting

Remove Captcha from request

Ignoring CAPTCHA validation without the field present in the backend server can result in severe damage and vulnerabilities.

lack-of-resources-rate-limiting

Replaying request with same captcha

The server fails to enforce captcha expiration, allowing users to submit multiple requests using the same captcha value without time restrictions.

lack-of-resources-rate-limiting

Replaying request with same captcha

The server fails to enforce captcha expiration, allowing users to submit multiple requests using the same captcha value without time restrictions.

lack-of-resources-rate-limiting

Possible DOS attack by Pagination misconfiguration

Quite often, APIs do not impose any restrictions on the size or number of resources that can be requested by the user.

lack-of-resources-rate-limiting

Possible DOS attack by Pagination misconfiguration

Quite often, APIs do not impose any restrictions on the size or number of resources that can be requested by the user.

News

5 mins

Akto Earns 20 Badges in G2’s Winter 2025 Reports for API Security and DAST

API Security

8 Minutes

Top 10 Invicti Alternatives in 2025