A2B API attack: Python client hitting app endpoints with SQLi or ID enumeration

Arnold Chan@slaz

•updated 3 days ago•0•0•2

Detects non-browser Python-based HTTP clients (such as python-requests, python-urllib, aiohttp, or httpx) targeting specific API endpoints (/user, /profile, /order, /upload) while exhibiting indicators of SQL injection or high-volume object ID enumeration.