Attacks
-
Burst
Seventy requests in a moment from one address, against a limit of 60 per minute.
-
Credential stuffing
One account, one wrong password from each of 20 addresses, so no address fails twice. Then its owner signs in with the right password.
-
Token replay
The owner redeems a single-use refresh token; then a stolen copy is replayed from another address.
What happened
Run an attack to see each of its requests and their verdicts.
| # | From | Request | Answer | Verdict |
|---|
Audit trail, live
What SentinelAPI reported for your runs, as it happened. Only you see these.
Connecting…