Skip to content
0:00 / 0:00

#faceit#brokenfunctionlevelauthorization#apisecurity

When I could put s1mple with me in the same party [ FaceIT API broken function level authorization ]

oreldmCS2

32 subscribers • 1 video on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.
  • May be out of date. The tools, versions or practices it shows have likely moved on.

Intermediate. Assumes working knowledge.

3.4K views4 years ago1 recommendation

SecurityWeb developmentWeb and application securityAPI design

A short demonstration of a broken function level authorization vulnerability in the FaceIT API that allowed unauthorized party manipulation.

Patched After I spoke with FaceIT.

Why it's here

1 person recommends this

u/sempahorein r/ReverseEngineering • Recommends

Full Disclosure: I found an API broken function level authorization vulnerability on the FACEIT Ltd platform