🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.

✅ Experience the power of an automated Insecure Direct Object Reference (IDOR) vulnerability detection tool. Safeguard your applications with cutting-edge technology that identifies potential security weaknesses in an efficient and streamlined manner.

Recon & vuln analysis from Burp Suite exports — IDORs, host injection, reset flows & payloads

get all picture of students in amikom.ac.id

A lightweight, high-performance browser extension (Manifest V3) designed for penetration testers and ethical hackers. Features passive HTTP traffic inspection, automated IDOR/BOLA scoring, noise filtering, and AI-driven vulnerability analysis with PDF report generation. Built for ethical security research.

🛡️ Security scanner for detecting secrets, auth flaws, dependency risks, and AI prompt-injection vulnerabilities in modern web apps 🔍🛠️

Hands-on CTF-style Broken Access Control lab for Node/Express, covering IDOR, vertical privilege escalation, JWT abuse, batch authorization bypass, and multi-tenant isolation.

BuggyBuy: Deliberately Vulnerable MERN Stack Web Application for Security Testing

CLI scanner that finds IDOR & BOLA vulnerabilities by testing object references in web APIs.

The "Web Security Scripts" repository is a curated collection of Python scripts meticulously crafted by Tejas Barguje Patil to fortify website security. From scanning for critical vulnerabilities such as SQL injection and XSS to investigating subdomains for potential risks, these tools provide a comprehensive toolkit for web developers and security

This project is a deliberately vulnerable web application developed using PHP and MySQL. It is designed for learning, demonstration, and testing of web application security vulnerabilities and secure coding practices.

Advanced automated IDOR testing tool with UUID fuzzing, JWT analysis, GraphQL support, POST request fuzzing, and smart ID parameter discovery.

A hands-on web application penetration testing lab based on OWASP Juice Shop, covering the OWASP Top 10 vulnerabilities. Includes practical testing methodology, Burp Suite workflows, vulnerability analysis, CVSS scoring, and professional reporting.

cyber security lab exam

Intentionally vulnerable PHP web app demonstrating OWASP Top 10 — for educational use only

A mock report testing the 2025 OWASP Top 10 application security risks, featuring exploitation walkthroughs, impact, and remediation sections.

A comprehensive collection of Capture The Flag (CTF) writeups, vulnerability assessments, and web exploitation methodologies. This repository documents my step-by-step approach to solving complex cybersecurity challenges, focusing on identifying and exploiting logic flaws, IDOR, SQLi, and XSS vulnerabilities.

Before/after security hardening of an AI-generated Supabase SaaS. 19 findings: service-role key in the browser, no row level security, broken object-level authorization, public storage bucket. Exploit tests on both branches, demonstrating each hole then proving it closed.

🎓 Complete IDOR (Insecure Direct Object Reference) Guide: Beginner → Advanced