CalvinBackup/ai-llm-red-team-handbook
1
0 Fork 0
mirror of https://github.com/Shiva108/ai-llm-red-team-handbook.git synced 2026-10-13 19:21:05 +02:00
Code Issues Packages Projects Releases Wiki Activity

docs: Update and clarify case studies, real-world examples, and minor formatting across chapters.

Browse Source
This commit is contained in:
shiva108 committed 2025-12-30 18:04:26 +01:00
1 parent 2212d1d7cb
commit ccdc0fed9e
6 files changed
+17 -18
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/Chapter_17_04_API_Exploitation_and_Function_Calling.md
+3 -3
View File
@@ -124,7 +124,7 @@ class APIEnumerator:
**Real-World Impact:**
A 2019 audit found that 73% of APIs had undocumented endpoints exposed, and 41% of those had vulnerabilities. That's a huge target.
According to industry security research, a significant percentage of APIs have undocumented endpoints exposed, many with vulnerabilities. This highlights the importance of API enumeration in security testing.
#### Parameter fuzzing
@@ -400,10 +400,10 @@ Key fixes:
**Real-World Impact:**
- **2019 - Facebook**: IDOR exposed private photos of millions.
- **2018 - Facebook**: Bug exposed private photos of 6.8 million users.
- **2020 - T-Mobile**: Customer data leaked via account numbers.
- **2021 - Clubhouse**: Audio room data scraped via sequential IDs.
- **2022 - Parler**: 70TB of user posts downloaded via IDOR.
- **2021 - Parler**: 70TB of user posts downloaded via IDOR.
**Testing for IDOR:**