A tool that automates the search for IDOR vulnerabilities in web apps and APIs
☆65Jan 18, 2021Updated 5 years ago
Alternatives and similar repositories for apidor
Users that are interested in apidor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Differential access-control testing for IDOR/BOLA - drives multiple identities at the same objects and proves when one can read another's…☆15Updated this week
- The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points…☆27Jun 25, 2023Updated 3 years ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆71Sep 4, 2026Updated 2 weeks ago
- A script written in python3 to spread blind cross-site scripting payloads on HTTP requests headers☆10Oct 2, 2022Updated 3 years ago
- Quick Repo for any Bug Hunter☆15May 19, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A Simple, Fast and Powerful poc engine tools was built by antx, which support synchronous mode and asynchronous mode.☆17Jul 4, 2023Updated 3 years ago
- CosmicSting (CVE-2024-34102)☆48Sep 5, 2024Updated 2 years ago
- IDOR bypass fuzz 权限绕过burp 插件 fuzz （shiro 等）☆26Sep 1, 2021Updated 5 years ago
- ☆12Jul 4, 2024Updated 2 years ago
- JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various e…☆51Apr 29, 2024Updated 2 years ago
- A simple tool that aims to efficiently and quickly parse the outputs of web scraping tools like gau☆12Jun 28, 2021Updated 5 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpc☆64Nov 9, 2023Updated 2 years ago
- IDOR testing tool. Coded during Lunizz live stream.☆29May 11, 2020Updated 6 years ago
- jmreport/qurestSql 未授权SQL注入批量扫描poc Jeecg-Boot是一款基于Spring Boot和Jeecg-Boot-Plus的快速开发平台，最新的jeecg-boot 3.5.0 中被爆出多个SQL注入漏洞。☆21Jun 20, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Quake Command-Line Application With Golang☆11Jul 20, 2023Updated 3 years ago
- ☆11Dec 20, 2020Updated 5 years ago
- BigBlueButton versions lower than 2.2.4 have a LFI vulnerability allowing access to sensitive files. 🚨☆14May 22, 2026Updated 4 months ago
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner☆17Sep 26, 2024Updated last year
- Cli tool to transfer terminal settings from Kitty and Alacritty to Ghostty terminal☆16Dec 16, 2024Updated last year
- A very vulnerable implementation of a GraphQL API.☆63Nov 12, 2021Updated 4 years ago
- KakHunt is a python GUI Tool private tool which earns me 100s of bugs every month. It spawns URLS and filters Sensitive Info.☆50Apr 27, 2023Updated 3 years ago
- PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configur…☆26Feb 24, 2026Updated 7 months ago
- An x64 binary executing code that's not inside of it.☆17Feb 28, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- URL Fuzzer☆23Nov 22, 2024Updated last year
- A repo for tools, utils, and wrappers that are to small to put in their own repo.☆23Mar 18, 2023Updated 3 years ago
- Mrco24-Lfi-Scanner is a high-speed Local File Inclusion (LFI) vulnerability scanning tool developed in the Go programming language. It's …☆14Dec 16, 2023Updated 2 years ago
- Describe how to use ffuf different options with examples☆14Jun 13, 2022Updated 4 years ago
- Python client for the Open eXecution Protocol (OXP)☆18May 16, 2025Updated last year
- Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE.☆20Feb 2, 2024Updated 2 years ago
- ☆16Jun 23, 2024Updated 2 years ago
- Image framework for iOS to display/encode/decode animated WebP, APNG, GIF, and more.☆14Apr 29, 2022Updated 4 years ago
- GodOfWar - Malicious Java WAR builder with built-in payloads☆125Apr 16, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- System Security Project☆13Feb 28, 2017Updated 9 years ago
- ☆29Jul 19, 2026Updated 2 months ago
- ☆10Jan 30, 2022Updated 4 years ago
- Intellisense for package managers files☆17May 31, 2026Updated 3 months ago
- ☆23Sep 19, 2024Updated 2 years ago
- Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…☆290Sep 2, 2025Updated last year
- ☆19Sep 18, 2023Updated 3 years ago