teejlab / API-Risk-Assessment-Framework

A framework for quantifying API risks.
https://teejlab.github.io/API-Risk-Assessment-Framework/intro.html
MIT License
5 stars 8 forks source link

Extract the high-risk headers from metadata response #55

Open SonQBChau opened 2 years ago

SonQBChau commented 2 years ago

This is another high-risk factor in the model. If the server exposes too much information or has it misconfigured, the hacker can take advantage of this and launch the attack. If we can extract the security feature from the metadata, it will give an early indicator of the risk level of the API. I will go through response and see if we can find something important and let the algorithm classify it