Skill UI

A detailed guide on discovering and exploiting Mass Assignment vulnerabilities in REST APIs. Users learn to inject unexpected parameters into API requests (POST, PUT, PATCH) to bypass authorization controls, escalate privileges (e.g., changing 'role'), and modify sensitive fields (e.g., 'balance', 'isAdmin') during security assessments and bug bounty hunting.

This guide details how to implement multi-layered API threat protection using Google Apigee. It covers critical security policies including JSON/XML content validation, OAuth 2.0 enforcement, SpikeArrest rate limiting, and advanced regex patterns to defend against OWASP Top 10 threats. Ideal for establishing robust API security controls and meeting compliance requirements.

Use RESTler to automate stateful security testing of REST APIs. It processes OpenAPI specifications to generate fuzzing grammars, allowing users to discover complex bugs, such as injection vulnerabilities, resource leaks, and unhandled exceptions (500 errors), by executing diverse sequences of API calls. Essential for robust CI/CD regression testing and proactive API security assessments.

A comprehensive framework for testing REST and GraphQL APIs against Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR). This tool simulates an attacker's behavior by systematically intercepting and modifying object identifiers (IDs, UUIDs, slugs) within API calls. It helps identify critical authorization flaws, ensuring that an authenticated user cannot access or modify resources belonging to other tenants or users, adhering to OWASP API Security Top 10.

polars-bio accelerates genomic interval math and bioinformatics I/O by combining Polars, Arrow, and DataFusion to handle BED/VCF/BAM/GFF/FASTA streams, SQL queries, and cloud storage with overlap, coverage, and nearest APIs plus streaming fallbacks.

Use this helper to search ten academic paper databases via their REST APIs whenever you need research papers, preprints, citation data, metadata, or open-access PDFs; it routes DOI/PMID/author/topic queries to the right endpoints and returns raw JSON plus the queried databases/paths.

Leverages 78 public scientific, biomedical, materials, and economic REST APIs to find compounds, genes, pathways, clinical trials, patents, economic indicators, weather, and other structured data, returning raw JSON plus the databases/endpoints used.

Guides designing stable, well-documented interfaces for APIs, module boundaries, and component props to make correct usage easy and inadvertent mistakes difficult.

This comprehensive guide outlines established best practices for developing robust, scalable, and high-quality enterprise applications using Spring Boot and Java. It covers structuring projects, implementing dependency injection, designing RESTful APIs, managing transactions, securing endpoints, and utilizing advanced testing strategies (Unit, Integration). Ideal for developers aiming for industry-standard code quality.

This comprehensive guide outlines best practices for developing high-quality, idiomatic, and maintainable enterprise applications using Kotlin and Spring Boot. It covers architectural patterns, dependency injection using primary constructors, managing state with data classes, implementing robust RESTful APIs, handling transactions, and leveraging Kotlin features like null safety and Coroutines for asynchronous programming. It also provides guidance on modern testing strategies (Kotest, Testcontainers).

This comprehensive guide details the ten most common mistakes and anti-patterns encountered when integrating with the Figma REST and Plugin APIs. It covers critical topics such as preventing oversized data fetches, managing rate limits, securing tokens, handling color format conversions, and optimizing data sync using webhooks instead of polling. Essential for code reviews and onboarding. Use when reviewing Figma code, onboarding new developers, or auditing an existing Figma integration.

This guide provides essential best practices for building resilient applications that interact with rate-limited APIs, specifically addressing the CAST AI REST API. It details the implementation of exponential backoff with jitter and utilizing request queuing mechanisms (like p-queue) to gracefully handle HTTP 429 errors. Use this pattern to optimize API call patterns and ensure system stability when making batch or frequent requests.