Ethical Hacking · Cohort 1 finalist
Adegbite Adeyemi Sodiq
Built AuthPath: Automated Authorization & Access-Control Testing Framework
Technical highlights
- On a vulnerable banking API I built, it found 12 access-control violations; after patching, a retest confirmed all 12 fixed with nothing else broken.
In the finalist's own words, from their project submission.
Ethical Hacking project
AuthPath: Automated Authorization & Access-Control Testing Framework
Many apps check that a user is logged in, but not whether that user may see or change a specific record. This flaw (IDOR/BOLA) lets anyone view someone else's account or result just by changing a number in a web address, and it is among the most common serious API bugs. AuthPath is a framework I built to test for it automatically. You write the access rules once (who may do what); it generates test cases, sends real requests to the running app, and reports every mismatch with a reproducible curl command, severity rating and specific remediation. It also detects excessive data exposure, like an admin-only field leaking to normal users. On a vulnerable banking API I built, it found 12 access-control violations; after patching, a retest confirmed all 12 fixed with nothing else broken. It also found real flaws in a second app, SecurePay, including a password-hash leak. It helps small teams without a security budget turn "did we get authorization right?" into a repeatable, provable answer.
In their words.
UBI taught me how to work under pressure and how to write reports that actually communicate not just technical skill but also the discipline to document and explain it clearly. That combination is what I'll carry into every role after this
