#burp-suite

Testing for BOLA with Burp Suite: a repeatable workflow

A step-by-step workflow for finding object-level authorization flaws in APIs using an intercepting proxy and two authenticated sessions.