pentest-idor

What problem does it solve?

This Skill helps penetration testers identify and exploit Insecure Direct Object Reference (IDOR) vulnerabilities, a common flaw allowing unauthorized access to sensitive data or resources.

Core Features & Use Cases

• Attack Surface Discovery: Identifies high-risk API endpoints and parameters susceptible to IDOR.
• Exploitation Techniques: Provides methods for testing and exploiting IDOR, including parameter tampering, HTTP method switching, and GraphQL manipulation.
• Use Case: When testing an e-commerce API, use this Skill to systematically check if you can access or modify another user's order details by manipulating order IDs in API requests.

Quick Start

Use the pentest-idor skill to identify and test for insecure direct object reference vulnerabilities in the target API.