Intro

This chapter features speakers sharing their hands-on experiences with penetration testing at a financial institution, emphasizing the challenges posed by GraphQL. They explore the critical role of backend systems and permissions, detailing how a flawed implementation led to the unintentional access of sensitive client data.