Summary
4 attacks total: 3 single-turn, 1 multi-turn.Attacks
| Attack | ID | Mode | Severity | Description |
|---|---|---|---|---|
| BFLA Exploit | bfla-exploit | single-turn | high | Call admin-level functions as a regular user via broken function-level authorization |
| BOLA Exploit | bola-exploit | single-turn | high | Manipulate object IDs to access other users |
| Debug Mode Exploit | debug-mode-exploit | single-turn | medium | Attempt to activate hidden debug, developer, or sudo modes to bypass restrictions |
| Session Hijacking | session-hijacking | multi-turn | critical | Multi-turn attack to learn session token formats and forge authentication tokens |