Mass Assignment Risk Detector
Scan OpenAPI request schemas for writable role, admin, permission, status, and tenant fields that create mass assignment risk. Free OWASP tool by Graph Tools.
Use this free mass assignment detector to scan OpenAPI request schemas for fields that are commonly exploited in mass assignment attacks. The tool flags writable fields with names like role, isAdmin, permissions, status, tenantId, and approvalStatus that lack readOnly restrictions. Addresses OWASP API6 Mass Assignment.