A tool that automates the search for IDOR vulnerabilities in web apps and APIs
☆65Jan 18, 2021Updated 5 years ago
Alternatives and similar repositories for apidor
Users that are interested in apidor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Differential access-control testing for IDOR/BOLA - drives multiple identities at the same objects and proves when one can read another's…☆14Sep 23, 2026Updated last month
- The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points…☆28Jun 25, 2023Updated 3 years ago
- ✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications …☆70Sep 4, 2026Updated 2 months ago
- IDOR testing tool. Coded during Lunizz live stream.☆29May 11, 2020Updated 6 years ago
- Quick Repo for any Bug Hunter☆15May 19, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Security test tool for Blind XSS☆28Mar 5, 2020Updated 6 years ago
- IDOR bypass fuzz 权限绕过burp 插件 fuzz （shiro 等）☆26Sep 1, 2021Updated 5 years ago
- Template to detect some malware☆15Aug 7, 2023Updated 3 years ago
- ☆35Aug 15, 2020Updated 6 years ago
- ☆12Jul 4, 2024Updated 2 years ago
- A simple tool that aims to efficiently and quickly parse the outputs of web scraping tools like gau☆12Jun 28, 2021Updated 5 years ago
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- A simple tool which makes creating nuclei templates even easier.☆36Jun 23, 2024Updated 2 years ago
- jmreport/qurestSql 未授权SQL注入批量扫描poc Jeecg-Boot是一款基于Spring Boot和Jeecg-Boot-Plus的快速开发平台，最新的jeecg-boot 3.5.0 中被爆出多个SQL注入漏洞。☆21Jun 20, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- BigBlueButton versions lower than 2.2.4 have a LFI vulnerability allowing access to sensitive files. 🚨☆14May 22, 2026Updated 5 months ago
- ☆36Jan 8, 2026Updated 9 months ago
- ☆11Dec 20, 2020Updated 5 years ago
- Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…☆289Sep 2, 2025Updated last year
- Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.☆133Jul 11, 2021Updated 5 years ago
- A very vulnerable implementation of a GraphQL API.☆63Nov 12, 2021Updated 4 years ago
- Mrco24-Lfi-Scanner is a high-speed Local File Inclusion (LFI) vulnerability scanning tool developed in the Go programming language. It's …☆14Dec 16, 2023Updated 2 years ago
- KakHunt is a python GUI Tool private tool which earns me 100s of bugs every month. It spawns URLS and filters Sensitive Info.☆50Apr 27, 2023Updated 3 years ago
- A repo for tools, utils, and wrappers that are to small to put in their own repo.☆23Mar 18, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner☆17Sep 26, 2024Updated 2 years ago
- Complete Automated pentest framework for Database Hacking and Database Dorks☆11Apr 12, 2024Updated 2 years ago
- CosmicSting (CVE-2024-34102)☆48Sep 5, 2024Updated 2 years ago
- A comprehensive VS Code extension for developing Burp Suite extensions☆14Jul 22, 2025Updated last year
- ☆16Jun 23, 2024Updated 2 years ago
- Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains☆10May 1, 2021Updated 5 years ago
- The Proxy Auto Configuration (PAC) file dynamic generator which allows you to specify the proxying rules and the PAC-file will be generat…☆10Dec 5, 2019Updated 6 years ago
- URL Fuzzer☆24Nov 22, 2024Updated last year
- GodOfWar - Malicious Java WAR builder with built-in payloads☆125Apr 16, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- System Security Project☆13Feb 28, 2017Updated 9 years ago
- Go module that returns supported regions for a service or supported services for a region☆18Dec 12, 2025Updated 10 months ago
- The fastest way to setup XSSHunter. It has options for the official and Discord/Slack Forks☆46Mar 2, 2024Updated 2 years ago
- Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata☆222Jan 19, 2024Updated 2 years ago
- Somewhat Reliable PoC Exploit for CVE-2022-36804 (BitBucket Critical Command Injection)☆16Nov 23, 2023Updated 2 years ago
- Spoofcheck☆46Apr 13, 2026Updated 6 months ago
- ESP32 with app interface remoteXY and grab and sent code. Bruteforce Came and Nice. Have a Jammer 433. Bluetooth monitor + WiFi remote☆13Apr 6, 2025Updated last year