Exploit ORM search/filter endpoints to leak data from joined/related tables via relationship traversal operators. Use when search, filter, or list endpoints are backed by an ORM (Django, Rails, Laravel, Sequelize, Hibernate).