The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points to identify potential IDOR vulnerabilities. It leverages techniques such as parameter fuzzing, payload injection, and response analysis to detect signs of insecure direct object references.
☆28Jun 25, 2023Updated 3 years ago
Alternatives and similar repositories for IDOR-IN
Users that are interested in IDOR-IN are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Differential access-control testing for IDOR/BOLA - drives multiple identities at the same objects and proves when one can read another's…☆14Sep 23, 2026Updated 3 weeks ago
- A tool that automates the search for IDOR vulnerabilities in web apps and APIs☆65Jan 18, 2021Updated 5 years ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆71Sep 4, 2026Updated last month
- AI-based Web Application Penetration Testing Tool☆26Jan 19, 2024Updated 2 years ago
- Methodoloy for pentesting web applications.☆10Aug 18, 2022Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Describe how to use ffuf different options with examples☆14Jun 13, 2022Updated 4 years ago
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- Attack Active Directory Trusts with a single tool☆14Jan 15, 2025Updated last year
- ☆19Aug 26, 2020Updated 6 years ago
- A list of ChatGPT Prompts for Web Application Security, Bug Bounty, and Pentesting☆40May 18, 2023Updated 3 years ago
- Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains☆10May 1, 2021Updated 5 years ago
- IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applicatio…☆240Sep 25, 2025Updated last year
- ⚡ Golang library for quick make pentest tools☆16Apr 7, 2025Updated last year
- discord-bot A powerful discord bot with a ton of commands. It can also act as a Music bot & supports Slash Commands☆11May 21, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- The DNS Security Analysis Tool is a Python-based utility designed to conduct an in-depth security analysis of DNS configurations for mult…☆20Oct 18, 2024Updated last year
- A minimalistic android backdoor☆19Aug 1, 2020Updated 6 years ago
- ☆10Jul 3, 2021Updated 5 years ago
- the bear is an infostealer (grabber) malware written in C and assembly with the focus on evading detection.☆18Sep 8, 2024Updated 2 years ago
- Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API < 3.9.9 - Unauthenticated Privilege Escalation (…☆16Sep 20, 2023Updated 3 years ago
- BurpSuite Extension for performing scan via CLI.☆15Dec 5, 2017Updated 8 years ago
- A Complete SSRF (Server Side Request Forgery) Scanner.☆39Jul 20, 2026Updated 2 months ago
- A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.☆35Sep 30, 2026Updated 2 weeks ago
- A tool to exploit the hash length extension attack in various hashing algorithms☆17Sep 11, 2012Updated 14 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Laravel PHP framework black-box vulnerability scanner☆42Sep 3, 2024Updated 2 years ago
- ResetRyder - Open Source Brute Force Password Reset Tool☆19Mar 10, 2025Updated last year
- Locksmith is a tool which allow simple way to test several API keys for a bug bounty program☆13Dec 18, 2021Updated 4 years ago
- Instant access to you bug bounty submission dashboard on various platforms + publicly disclosed reports + #bugbountytip☆26May 26, 2020Updated 6 years ago
- Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Si…☆79Jan 13, 2026Updated 9 months ago
- A tool to exploit the hash length extension attack in various hashing algorithms☆10Apr 14, 2014Updated 12 years ago
- ☆10Sep 25, 2026Updated 3 weeks ago
- electribe2 allpat/zip converter☆14Feb 7, 2023Updated 3 years ago
- WAScan - Web Application Scanner☆21Mar 22, 2018Updated 8 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆40Nov 6, 2025Updated 11 months ago
- SQL Injection Vulnerability Scanner for a given URL written in Python☆16Feb 8, 2016Updated 10 years ago
- A simple HAR-based JavaScript recon automation kit for organizing JS files, endpoints, secrets, and gf-filtered attack surface during bug…☆19May 20, 2026Updated 4 months ago
- ☆14Mar 16, 2024Updated 2 years ago
- a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.☆20Jun 7, 2026Updated 4 months ago
- mirror☆14May 20, 2023Updated 3 years ago
- Easily take advantage of multi-core systems for Featherjs.☆16Feb 16, 2014Updated 12 years ago