Cyber Testing Api For Mass Assignment Vulnerability

Name: Cyber Testing Api For Mass Assignment Vulnerability
Author: nexuslinkproductions

ASecurity

Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have access to by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the data model without filtering. Part of OWASP API3:2

2 stars
0 votes
0 copies
3 views
Added September 10, 2026

securitygonodetestingapi

Works with

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 10, 2026

npx -y skills add nexuslinkproductions/yuri-os --skill cyber-testing-api-for-mass-assignment-vulnerability --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Cyber Testing Api For Mass Assignment Vulnerability?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Cyber Testing Api For Mass Assignment Vulnerability

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/nexuslinkproductions-cyber-testing-api-for-mass-assignment-vulnerabilit/badge)](https://www.skillsdirectory.com/skills/nexuslinkproductions-cyber-testing-api-for-mass-assignment-vulnerabilit)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: cyber-testing-api-for-mass-assignment-vulnerability
description: "Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have access to by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the data model without filtering. Part of OWASP API3:2"
hide: true
---

<!-- GENERATED:YURI-CODEX-SKILL-ADAPTER:v1 -->

# YURI skill adapter

Authoritative source: `.claude/skills/cyber-testing-api-for-mass-assignment-vulnerability/SKILL.md`

Authoritative source SHA-256: `d83b602b3fe7c4e2db563271b5656ddf63f0456e32a404da50e1969be4155f5c`

Source class: `cyber-armed`

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run `node _SYSTEM/Scripts/skill-recall.mjs --show cyber-testing-api-for-mass-assignment-vulnerability` and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.