News for hackers. Stuff that matters.
Re:MitmProxy2Swagger: Automagically reverse-engineer REST APIs by devjab on Saturday January 04, 2025 @03:02AM (#42593287)
Why wouldn’t you add authentication to an API you don’t want others to use?
Re:MitmProxy2Swagger: Automagically reverse-engineer REST APIs by ssdspoimdsjvv on Saturday January 04, 2025 @09:01AM (#42594710)
The web app probably authenticates using an API as well, in which case it's trivial to add that to your shadow client as long as you have the credentials.
Re:MitmProxy2Swagger: Automagically reverse-engineer REST APIs by lesuorac on Saturday January 04, 2025 @11:03AM (#42595511)
Laziness / skill issue.

How many apps have you seen only do client-side protection?