Top 10 winner
Attacking OData: HTTP Verb Tunneling, Navigation Properties for Additional Data Access, System Query Options ($select)
A Pentester’s Guide to Hacking OData (Whitepaper)
A penetration tester’s guide to OData service documents, metadata and RESTful operations. It recommends testing X-HTTP-Method verb tunneling, navigation properties and $select=* for inconsistent access controls, and demonstrates detailed error disclosure through unsupported $format values.
Record
- Document
- A Pentester’s Guide to Hacking OData (Whitepaper)
- Researcher
- Gursev Singh Kalra
- Published by
- McAfee Foundstone Professional Services
- Format
- Whitepaper
- Topic
- HTTP
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Gursev Singh Kalra, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .