The XSS Rat OWASP Lab by The XSS Rat
Home › API Top 10

OWASP API Security Top 10

2023

The OWASP API Security Top 10 (2023) focuses on the unique security risks that APIs face, beyond traditional web application vulnerabilities.

API1:2023Broken Object Level AuthorizationCriticalAPI2:2023Broken AuthenticationCriticalAPI3:2023Broken Object Property Level AuthorizationHighAPI4:2023Unrestricted Resource ConsumptionHighAPI5:2023Broken Function Level AuthorizationHighAPI6:2023Unrestricted Access to Sensitive Business FlowsHighAPI7:2023Server Side Request ForgeryHighAPI8:2023Security MisconfigurationHighAPI9:2023Improper Inventory ManagementMediumAPI10:2023Unsafe Consumption of APIsMedium

Each item contains theory, a real vulnerability demo, and a flag to capture. Start with item 1 and work through all 10.