High-performance vulnerability engine for modern repos. Automate the hunt for API leaks, BOLA, and logic flaws. Build secure, audit early, trust nothing.
-
Updated
May 9, 2026 - JavaScript
#
idor-exploitation
Here are 8 public repositories matching this topic...
Hands-on CTF-style Broken Access Control lab for Node/Express, covering IDOR, vertical privilege escalation, JWT abuse, batch authorization bypass, and multi-tenant isolation.
security jwt lab security-tools idor broken-access-control idor-attack idor-vulnerability idor-ctf idor-exploitation
-
Updated
Apr 27, 2026 - JavaScript
CLI scanner that finds IDOR & BOLA vulnerabilities by testing object references in web APIs.
tool red-team go-tools security-tools vulnerability-scanner idor pentesting-tools bugbounty-tool bola idor-vulnerability idor-exploitation bola-detection bola-scanner
-
Updated
Jun 22, 2026 - Go
A hands-on web application penetration testing lab based on OWASP Juice Shop, covering the OWASP Top 10 vulnerabilities. Includes practical testing methodology, Burp Suite workflows, vulnerability analysis, CVSS scoring, and professional reporting.
cryptography virtual-machine penetration-testing pentesting pentest kali-linux ssrf sqlinjection owasp-juice-shop owasp-top-10 reconnaissance misconfiguration idor burp-suite idor-attack idor-vulnerability ssrf-exploit idor-exploitation
-
Updated
Jul 25, 2026
Advanced automated IDOR testing tool with UUID fuzzing, JWT analysis, GraphQL support, POST request fuzzing, and smart ID parameter discovery.
-
Updated
Jun 17, 2026 - Python
Automated web security testing tool designed to detect Insecure Direct Object References (IDOR) vulnerabilities in web applications
security automation penetration-testing bug-bounty ctf bugbounty vulnerability-scanners ctf-tools security-tools vulnerability-scanner automation-tools idor bug-bounty-hunters bugbounty-tool bug-bounty-hunting bug-bounty-tools idor-attack idor-vulnerability idor-exploitation idor-discovery
-
Updated
Sep 19, 2026 - Python
Burp Suite extension for automated multi-tenant IDOR/BOLA testing
java bug-bounty security-tools idor burp-suite bug-bounty-hunters bug-bounty-recon bug-bounty-hunting bug-bounty-tools bug-bounty-platform bug-bounty-automation idor-attack idor-vulnerability security-tools-testing idor-labs burp-suite-extension idor-exploitation security-tools-automation idor-discovery security-tools-ethical-hacking-2026-tec
-
Updated
Aug 1, 2026 - Java
Official write-up for the E-Bazaar spotlight challenge from ISSessions FantasyCTF 2026. Covers IDOR, business logic bypasses, and insecure cookie manipulation.
-
Updated
Sep 22, 2026 - Python
Add this topic to your repo
To associate your repository with the idor-exploitation topic, visit your repo's landing page and select "manage topics."