Automated Testing of Broken Authentication Vulnerabilities in Web APIs with AuthREST

Davide Corradini, Mariano Ceccato, Mohammad Ghafari

We present AuthREST, an open-source security testing tool targeting broken authentication, one of the most prevalent API security risks in the wild. AuthREST automatically tests we…