The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points to identify potential IDOR vulnerabilities. It leverages techniques such as parameter fuzzing, payload injection, and response analysis to detect signs of insecure direct object references.
☆28Jun 25, 2023Updated 3 years ago
Alternatives and similar repositories for IDOR-IN
Users that are interested in IDOR-IN are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Differential access-control testing for IDOR/BOLA - drives multiple identities at the same objects and proves when one can read another's…☆14Sep 23, 2026Updated last month
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆70Sep 4, 2026Updated 2 months ago
- A tool that automates the search for IDOR vulnerabilities in web apps and APIs☆65Jan 18, 2021Updated 5 years ago
- Methodoloy for pentesting web applications.☆10Aug 18, 2022Updated 4 years ago
- AI-based Web Application Penetration Testing Tool☆27Jan 19, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆35Jun 18, 2026Updated 4 months ago
- Local File Inclusion (LFI) scanner.☆12Aug 31, 2022Updated 4 years ago
- Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains☆10May 1, 2021Updated 5 years ago
- IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applicatio…☆242Oct 23, 2026Updated 2 weeks ago
- Attack Active Directory Trusts with a single tool☆14Jan 15, 2025Updated last year
- ☆12Jun 7, 2023Updated 3 years ago
- A simple Ip Locator Tool☆10Aug 4, 2024Updated 2 years ago
- Python client for the Open eXecution Protocol (OXP)☆18May 16, 2025Updated last year
- Specific C2 Detection Tool Written To Detect C2 Servers From RisePro Stealer Malware.☆14Nov 10, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- XSS scanning with Dalfox on Github-action☆26Nov 26, 2023Updated 2 years ago
- ☆12Nov 25, 2024Updated last year
- A python based tool for finding SQL vulnerable sites.☆14May 22, 2023Updated 3 years ago
- ☆10Jul 3, 2021Updated 5 years ago
- A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.☆35Sep 30, 2026Updated last month
- Laravel PHP framework black-box vulnerability scanner☆41Sep 3, 2024Updated 2 years ago
- Several scripts are based on the Netlas.io search engine. They will allow you to carry out the reconnaissance phase before the pen test i…☆52May 22, 2025Updated last year
- A PoC C2 tool utilizing Google Calendar events as a covert channel for communication between attacker and target.☆21Jun 22, 2023Updated 3 years ago
- An Efficent tool to find juicy secrets in javascript source code. Automate Your Javascript hunting using this tool.☆11Sep 24, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Custom firmware for the Fightboard and Fightboard MX by thnikk, supporting XInput and Nintendo Switch☆11Jan 8, 2022Updated 4 years ago
- A tool to exploit the hash length extension attack in various hashing algorithms☆10Apr 14, 2014Updated 12 years ago
- ☆10Dec 6, 2024Updated last year
- A sensible no bullshit repo of summaries of reports on hackerone, bugcrowd and alike, that makes straight up sense and make it easy to re…☆10Oct 21, 2023Updated 3 years ago
- SQL Injection Vulnerability Scanner for a given URL written in Python☆16Feb 8, 2016Updated 10 years ago
- Shared wordlists used for common subdomains , directory bruteforcing etc.☆12Jun 23, 2026Updated 4 months ago
- Mail Hunter is a tool that gathers e-mails from all the pages on a target website☆10Oct 9, 2020Updated 6 years ago
- Describe how to use ffuf different options with examples☆14Jun 13, 2022Updated 4 years ago
- A professional-grade HTTP POST slow-rate (R.U.D.Y) stress testing tool. Designed to exploit thread exhaustion in web servers using connec…☆14Apr 27, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Web Delivery & bypass applocker technic☆11Sep 3, 2017Updated 9 years ago
- WAScan - Web Application Scanner☆21Mar 22, 2018Updated 8 years ago
- Terminus is a Python-based voice-controlled terminal assistant designed to make your interactions with the terminal more intuitive and en…☆13Jan 22, 2024Updated 2 years ago
- ☆41Nov 6, 2025Updated last year
- Locksmith is a tool which allow simple way to test several API keys for a bug bounty program☆13Dec 18, 2021Updated 4 years ago
- Query builder for mongo_dart and objectory☆11Jan 26, 2026Updated 9 months ago
- Get newest public disclosed HackerOne report notifications on your Desktop☆15Jan 29, 2020Updated 6 years ago