domains / families / security / api-noauth-hunt

api-noauth-hunt

separate

Use when an API may expose data or privileged operations without authentication.

When to use

• Port scan reveals HTTP services on non-standard ports (3000, 5000, 8080-8085, 9000).
• Target has an API subdomain (api.target.com, backend.target.com).
• JavaScript bundles reference internal API endpoints.
• After `port-service-discovery` finds HTTP on unexpected ports.
• After `firebase-supabase-attack` identifies backend APIs.

When not to use

• State-changing validation without explicit authorization

Skill page

Source