🛡️ API Security Risk Analysis

📌 What is this?

• A security review of a public network platform.
• It finds logical flaws and translates them into business impacts.
• It uses safe, "read-only" methods to find vulnerabilities.

⚙️ Project Details

• Tested API: https://jsonplaceholder.typicode.com
• Methodology: Passive testing based on industry-standard OWASP security guidelines.
• Core Focus: Checking authentication, data exposure, and input validation layers.

🛠️ Tools Used

• Kali Linux
• Postman
• Browser Developer Tools

📂 Project Files

• Report: The full analysis document.
• Evidence: Verified screenshots of endpoints, data payloads, and system headers.

🔍 Found Risks

• High: Flaws that let users guess URLs to view other people's private data.
• Medium: System loops that leak whole user lists or accept messy, broken inputs.
• Low: High traffic limits and background headers that reveal software names.

👤 Author

• Adithyan.V | Cyber Security Researcher | TASK 3