SQL

In most applications, resources are addressed in the URL by numeric incremental ids. An attacker can quickly increment the id to enumerate all records scraping all available data. However, it is easy to prevent.