Differential access-control testing for IDOR/BOLA - drives multiple identities at the same objects and proves when one can read another's data. Not a status-code scanner.
☆14Sep 23, 2026Updated 3 weeks ago
Alternatives and similar repositories for Auto-IDOR
Users that are interested in Auto-IDOR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points…☆28Jun 25, 2023Updated 3 years ago
- AI-based Web Application Penetration Testing Tool☆26Jan 19, 2024Updated 2 years ago
- A list of ChatGPT Prompts for Web Application Security, Bug Bounty, and Pentesting☆40May 18, 2023Updated 3 years ago
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform☆27Jun 28, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆12Jul 4, 2024Updated 2 years ago
- A Complete SSRF (Server Side Request Forgery) Scanner.☆39Jul 20, 2026Updated 2 months ago
- A Python based scanner to find potential SSRF parameters in a web application.☆69Jul 12, 2021Updated 5 years ago
- URLess is a simple but powerful tool that removes paths from URLs, generating multiple variations of the base domain. This is useful for …☆16Apr 1, 2025Updated last year
- ☆10Apr 18, 2024Updated 2 years ago
- SQL Injection Vulnerability Scanner for a given URL written in Python☆16Feb 8, 2016Updated 10 years ago
- Linux privilege escalation enumeration tool for OSCP, CPTS, CTFs, and penetration testing. Detects kernel exploits, GTFOBins, Kubernetes …☆20Aug 24, 2026Updated last month
- Sqli-Scanner is a python3 script written to scan websites for SQL injection vulnerabilities Features 1 Scan one website 2 Scan multiple…☆22Nov 6, 2021Updated 4 years ago
- This repository provides a dockerized infrastructure and a python implementation of the CVE-2019-11043 exploit.☆14May 25, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Web application pentesting recon☆23Jul 25, 2020Updated 6 years ago
- POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal☆16Nov 26, 2024Updated last year
- ☆16Aug 4, 2026Updated 2 months ago
- Protect yourself from slopsquatting — AI-hallucinated malicious packages on npm and PyPI☆16Apr 4, 2026Updated 6 months ago
- This is a simple web application vulnerability scanner that checks if a given URL or IP address is vulnerable to 36 common web applicatio…☆28Aug 30, 2026Updated last month
- [Mirror] thc.org uses a CA that is not trusted on a base Arch system so we are mirroring some source here.☆14Nov 9, 2013Updated 12 years ago
- An advanced XSS vulnerability scanner.☆10Feb 24, 2025Updated last year
- Scans crossdomain.xml policies for expired domain names.☆26Aug 4, 2015Updated 11 years ago
- LDAP REST microservice with Password Policy overlay support☆10Nov 27, 2022Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Official API Documentation☆34Sep 10, 2026Updated last month
- 🔍 Search Engine/web crawler python script☆13Jun 29, 2017Updated 9 years ago
- Useful Apple macOS Automator & Shortcuts Scripts 苹果系统自动操作、快捷指令脚本☆17Dec 20, 2021Updated 4 years ago
- BurpSuite MCP Server: A powerful Model Context Protocol (MCP) server implementation for BurpSuite, providing programmatic access to Burp…☆87Apr 29, 2025Updated last year
- 1C RAS Offensive Security Tool☆31Oct 4, 2023Updated 3 years ago
- ☆16Jan 27, 2026Updated 8 months ago
- A curated list of free resources. 收集免费资源（适合创业小团队、个人学习等使用）☆18Feb 7, 2022Updated 4 years ago
- ☆22Aug 9, 2025Updated last year
- Tools that run inside the guest☆11Jan 2, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Bybit API client library for Go (ByBit API connector)☆10Sep 18, 2026Updated 3 weeks ago
- Quake Command-Line Application With Golang☆11Jul 20, 2023Updated 3 years ago
- ☆52Nov 19, 2025Updated 10 months ago
- How to Crack an Entry Level Job in Cybersecurity! - 2024☆21Jul 14, 2026Updated 3 months ago
- Stripe payment integration for Salesman.☆13Feb 23, 2023Updated 3 years ago
- Unauthenticated Remote Code Execution via Angular-Base64-Upload Library☆27Jul 12, 2025Updated last year
- ☆21Mar 28, 2023Updated 3 years ago