GManOfficial / IDOR-INLinks
The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points to identify potential IDOR vulnerabilities. It leverages techniques such as parameter fuzzing, payload injection, and response analysis to detect signs of insecure direct object references.
☆23Updated 2 years ago
Alternatives and similar repositories for IDOR-IN
Users that are interested in IDOR-IN are comparing it to the libraries listed below
Sorting:
- A tool that automates the search for IDOR vulnerabilities in web apps and APIs☆64Updated 5 years ago
- Xss payload for bypassing waf☆18Updated 5 years ago
- Host Header Vulnerability Scanner Automated Tool☆28Updated 9 months ago
- ☆27Updated 2 years ago
- A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.☆42Updated 2 months ago
- Offensive Security MISC Annotations and Payloads for Ethical Hackers / Security Researchers☆30Updated last year
- Enumerate old versions of robots.txt paths using Wayback Machine for content discovery☆57Updated 2 years ago
- This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer whil…☆64Updated 9 months ago
- An interactive bash script for detecting IDOR vulnerabilities. Automates the discovery of access control issues in web applications, enha…☆14Updated 10 months ago
- Argus is used to test for Blind XSS and SSRF vulnerbilities or any sort of OOB detection☆13Updated last year
- Useful Github Dorks for BugBounty -☆68Updated 3 years ago
- Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi☆44Updated 4 years ago
- bash script for automating subdomain enumeration process either passive or active☆29Updated last year
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆97Updated last year
- Recon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnais…☆11Updated 3 years ago
- I collected it to help the bug hunter get a reward☆57Updated 3 years ago
- ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …☆35Updated 2 years ago
- convert case style of words☆58Updated 2 years ago
- Describe how to use ffuf different options with examples☆90Updated 3 years ago
- A Collection of Wordlists for Penetration Testing☆32Updated 2 months ago
- List of payloads for BurpSuite intruder. Payloads gathered from Swisskyrepos PayloadsAllTheThings☆36Updated last month
- Xssor.go is a xss reflections checker for urls☆71Updated 2 years ago
- Welcome to the 403 and 401 Bypass Techniques and Bug Bounty Tips repository! This repo is a collection of methods and strategies to bypas…☆19Updated last year
- HackLiners: CyberSec/BugHunting OneLiners☆62Updated last year
- Pointer is a Fast Simple Lightweight Tool for Endpoint Discovery.☆14Updated 2 years ago
- ☆33Updated 3 years ago
- This tool is a simple LFI, RFI, RCE, and Joomla Components vulnerability scanner, created by JayCyberSecurity☆22Updated 3 years ago
- Resolvers updated daily for reconftw☆47Updated 3 years ago
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆36Updated 2 years ago
- Probuster : A Python based Web Application Penetration testing tool for Information Gathering⚡.☆60Updated last year