Differential access-control testing for IDOR/BOLA - drives multiple identities at the same objects and proves when one can read another's data. Not a status-code scanner.
☆14Sep 23, 2026Updated last month
Alternatives and similar repositories for Auto-IDOR
Users that are interested in Auto-IDOR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points…☆28Jun 25, 2023Updated 3 years ago
- A tool that automates the search for IDOR vulnerabilities in web apps and APIs☆65Jan 18, 2021Updated 5 years ago
- Production-grade XXE scanner that combines statistical baselining, differential parser fingerprinting, and OOB confirmation to find what …☆13Sep 25, 2026Updated last month
- a drop-in replacement for Nmap powered by shodan.io☆10Apr 3, 2024Updated 2 years ago
- Local File Inclusion (LFI) scanner.☆12Aug 31, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 8 months ago
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- ☆11Apr 20, 2025Updated last year
- ESP32 with app interface remoteXY and grab and sent code. Bruteforce Came and Nice. Have a Jammer 433. Bluetooth monitor + WiFi remote☆13Apr 6, 2025Updated last year
- A python based tool for finding SQL vulnerable sites.☆14May 22, 2023Updated 3 years ago
- ☆12Jul 4, 2024Updated 2 years ago
- Python tools for Quantum AI Crypt☆12Sep 21, 2019Updated 7 years ago
- A wireless headset control center for the Linux desktop☆20Updated this week
- The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform☆27Jun 28, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A CMS-aware OSINT and recon tool for red teamers and bug bounty hunters — detects CMS, finds login portals, scrapes usernames, and genera…☆14Jul 14, 2025Updated last year
- Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities Features 1 Scan one website 2 Scan multiple…☆23Nov 6, 2021Updated 5 years ago
- A set of Python tools useful for cryptography and cryptanalysis.☆14Feb 3, 2017Updated 9 years ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆70Sep 4, 2026Updated 2 months ago
- CyberTalents Blue Team Scholarship 2023 By Trend Micro☆12Sep 28, 2023Updated 3 years ago
- ☆10Apr 18, 2024Updated 2 years ago
- This project showcases how to exploit vulnerabilities in NFC cards using Arduino and RFID technology. By leveraging the MFRC522 RFID modu…☆16Jul 4, 2023Updated 3 years ago
- WAScan - Web Application Scanner☆21Mar 22, 2018Updated 8 years ago
- A python script file to forensically examine remote computer networks - It can analyse smb and ldap active directory systems, start phis…☆16May 18, 2026Updated 5 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- VulnMiner: A Comprehensive Framework for Vulnerability Detection in C/C++ Source Code☆13Apr 24, 2024Updated 2 years ago
- Convert all valid keys from flipperzero-goodies to rfid/ibutton fuzzer format☆17Jul 30, 2023Updated 3 years ago
- ☆13Jul 13, 2024Updated 2 years ago
- ☆21Sep 24, 2025Updated last year
- This repository provides a dockerized infrastructure and a python implementation of the CVE-2019-11043 exploit.☆14May 25, 2020Updated 6 years ago
- Disclosures of bugs and vulnerabilities reported by Hacktron.☆16Aug 25, 2025Updated last year
- webpwn3r ======== WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @o…☆28Jan 11, 2019Updated 7 years ago
- Convert Event Log XML to EVTX file☆15Dec 21, 2023Updated 2 years ago
- ☆24Jun 20, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Web application pentesting recon☆23Jul 25, 2020Updated 6 years ago
- An ESP32 based evil twin AP and deauther, with support for Heltec ESP32(V3), based off of y0xhz's code found here: https://github.com/y0x…☆19Oct 19, 2023Updated 3 years ago
- ☆16Aug 4, 2026Updated 3 months ago
- Simple one-stop tool to manage X.509/TLS certs and all the ACME CA authorization stuff☆20Oct 5, 2026Updated last month
- Protect yourself from slopsquatting — AI-hallucinated malicious packages on npm and PyPI☆16Apr 4, 2026Updated 7 months ago
- Linux privilege escalation enumeration tool for OSCP, CPTS, CTFs, and penetration testing. Detects kernel exploits, GTFOBins, Kubernetes …☆21Aug 24, 2026Updated 2 months ago
- Agentic Orchestration & Messaging — is an open-source platform for end-to-end specification change management powered by AI agents. It en…☆33Oct 8, 2026Updated 3 weeks ago