- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Security
Unrestricted Access to Sensitive Business Flows
Globomantics IT Security team is worried about an ongoing spike in automated bot traffic abusing the purchasing APIs and wants to test the application's resilience to these attacks. You will act as a security engineer conducting an internal assessment for Globomantics. Your objective is to test the application's business logic boundaries and error handling. You have to test the Python-based APIs and deliberately trigger errors to intercept sensitive internal data, such as file paths and SQL queries. By the end of this lab, you will have hands-on experience identifying error-handling vulnerabilities and configuring a robust global error handler, giving you practical insight into securing APIs against information leakage.
Lab Info
Table of Contents
-
Challenge
Analyze and exploit error handling
In this objective, you will step into the red team's role and attack the purchasing API endpoints using payloads to observe how poor error handling can expose sensitive information.
-
Challenge
Implementing strong global error handler
In this objective, you will transition from the attacker role to the defender role and implement secure configuration and source code for the Python API. You will configure a global error handler to ensure that application exceptions are handled securely and that internal infrastructure details and other sensitive information are not returned to the client.
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.