A tool that automates the search for IDOR vulnerabilities in web apps and APIs
☆65Jan 18, 2021Updated 5 years ago
Alternatives and similar repositories for apidor
Users that are interested in apidor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An interactive bash script for detecting IDOR vulnerabilities. Automates the discovery of access control issues in web applications, enha…☆15Apr 10, 2025Updated last year
- The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points…☆27Jun 25, 2023Updated 3 years ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆73Mar 9, 2025Updated last year
- A script written in python3 to spread blind cross-site scripting payloads on HTTP requests headers☆10Oct 2, 2022Updated 3 years ago
- Quick Repo for any Bug Hunter☆15May 19, 2021Updated 5 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Template to detect some malware☆15Aug 7, 2023Updated 2 years ago
- A Simple, Fast and Powerful poc engine tools was built by antx, which support synchronous mode and asynchronous mode.☆17Jul 4, 2023Updated 3 years ago
- CosmicSting (CVE-2024-34102)☆48Sep 5, 2024Updated last year
- IDOR bypass fuzz 权限绕过burp 插件 fuzz （shiro 等）☆27Sep 1, 2021Updated 4 years ago
- JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various e…☆50Apr 29, 2024Updated 2 years ago
- A simple tool that aims to efficiently and quickly parse the outputs of web scraping tools like gau☆12Jun 28, 2021Updated 5 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpc☆63Nov 9, 2023Updated 2 years ago
- jmreport/qurestSql 未授权SQL注入批量扫描poc Jeecg-Boot是一款基于Spring Boot和Jeecg-Boot-Plus的快速开发平台，最新的jeecg-boot 3.5.0 中被爆出多个SQL注入漏洞。☆21Jun 20, 2023Updated 3 years ago
- Quake Command-Line Application With Golang☆11Jul 20, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆11Dec 20, 2020Updated 5 years ago
- ☆35Jan 8, 2026Updated 6 months ago
- BigBlueButton versions lower than 2.2.4 have a LFI vulnerability allowing access to sensitive files. 🚨☆14May 22, 2026Updated 2 months ago
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner☆17Sep 26, 2024Updated last year
- A very vulnerable implementation of a GraphQL API.☆62Nov 12, 2021Updated 4 years ago
- KakHunt is a python GUI Tool private tool which earns me 100s of bugs every month. It spawns URLS and filters Sensitive Info.☆50Apr 27, 2023Updated 3 years ago
- PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configur…☆21Feb 24, 2026Updated 4 months ago
- An x64 binary executing code that's not inside of it.☆17Feb 28, 2023Updated 3 years ago
- URL Fuzzer☆24Nov 22, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A repo for tools, utils, and wrappers that are to small to put in their own repo.☆23Mar 18, 2023Updated 3 years ago
- Mrco24-Lfi-Scanner is a high-speed Local File Inclusion (LFI) vulnerability scanning tool developed in the Go programming language. It's …☆14Dec 16, 2023Updated 2 years ago
- Load ssp dll golang implementation☆17Jan 18, 2022Updated 4 years ago
- Techniques / Tips and tricks for finding sensitive data exposures in Github for Penetration Testers / Bug Bounty Hunters☆17Aug 1, 2020Updated 5 years ago
- ☆16Jun 23, 2024Updated 2 years ago
- Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE.☆20Feb 2, 2024Updated 2 years ago
- Image framework for iOS to display/encode/decode animated WebP, APNG, GIF, and more.☆14Apr 29, 2022Updated 4 years ago
- Notify is a helper utility written in Go that allows you to post output to multiple platforms.☆18May 27, 2022Updated 4 years ago
- System Security Project☆13Feb 28, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆10Jan 30, 2022Updated 4 years ago
- ☆23Sep 19, 2024Updated last year
- Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…☆290Sep 2, 2025Updated 10 months ago
- ☆19Sep 18, 2023Updated 2 years ago
- The fastest way to setup XSSHunter. It has options for the official and Discord/Slack Forks☆46Mar 2, 2024Updated 2 years ago
- A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning☆524Jul 5, 2023Updated 3 years ago
- ☆12Apr 20, 2025Updated last year