---
title: "#mass-assignment articles | Hashnode"
description: "Explore 2 articles tagged #mass-assignment on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/mass-assignment"
---

Tag

# #mass-assignment

2 posts · 0 followers

[Arshad](https://hashnode.com/@arshadakl) · [Sep 5](https://hashnode.com/posts/how-a-profile-update-feature-could-drain-a-company-s-bank-account/6a9c5976d374389ef28f3114)

### [How a Profile Update Feature Could Drain a Company's Bank Account](https://blog.arshadakl.in/how-a-profile-update-feature-could-drain-a-company-s-bank-account?utm_source=hashnode&utm_medium=feed)

How a simple profile update flaw let users change credits, abuse premium AI agents, and create costly exposure for the platform.

6 min read · [blog.arshadakl.in](https://blog.arshadakl.in/how-a-profile-update-feature-could-drain-a-company-s-bank-account?utm_source=hashnode&utm_medium=feed)

[Coding Droplets](https://hashnode.com/@codingdroplets) · [Jun 23](https://hashnode.com/posts/overposting-aspnet-core-web-api-prevention/6a3a8b37c76d3ca8aca11f5e)

### [Overposting in ASP.NET Core APIs: Prevention Guide](https://codingdroplets.com/overposting-aspnet-core-web-api-prevention?utm_source=hashnode&utm_medium=feed)

Learn how to prevent overposting and mass assignment attacks in ASP.NET Core Web APIs using DTOs, \[BindNever\], and defence-in-depth patterns.

9 min read · [codingdroplets.com](https://codingdroplets.com/overposting-aspnet-core-web-api-prevention?utm_source=hashnode&utm_medium=feed)

[shemkar](https://hashnode.com/@shemkar) · [Apr 26](https://hashnode.com/posts/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate/69ee7c173d6a492cdd4ecfcd)

### [One Extra JSON Key: How a Harmless Profile Endpoint Became an ATO Candidate](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed)

A real bug bounty lesson about mass assignment, impact proof, and learning from weak reports.

6 min read · [shemkar.hashnode.dev](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed)