Download

Skill UI

Browse and discover 5938+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IDOR , found 12 results

Default Newest Most Downloaded

API Fuzzing Bug Bounty

api-fuzzing-bug-bounty

sickn33/antigravity-awesome-skills

Guides bug bounty hunters through API fuzzing and pentesting for REST, SOAP, and GraphQL services, covering reconnaissance, auth, IDOR, injection, method switching, rate-limit bypass, and exploitation proof reporting.

API Fuzzing Techniques

api-fuzzing-for-bug-bounty

sickn33/antigravity-awesome-skills

Guides bug bounty hunters through API fuzzing and penetration testing, covering REST, SOAP, and GraphQL recon, authentication bypass, IDOR methods, injections, method abuse, GraphQL attacks, and payload delivery techniques.

Web IDOR Testing

sickn33/antigravity-awesome-skills

Provides structured guidance for identifying, exploiting, and reporting insecure direct object references in web applications, covering reconnaissance, payload manipulation, Burp Suite workflows, and remediation advice.

IDOR Vulnerability Testing

idor-vulnerability-testing

sickn33/antigravity-awesome-skills

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

API Fuzzing Bug Bounty

api-fuzzing-for-bug-bounty

zebbern/claude-code-guide

Guides bug bounty hunters through REST, SOAP, and GraphQL API fuzzing to uncover authentication weaknesses, IDOR, injections, and endpoint bypasses while outlining practical reconnaissance and exploitation workflows.

IDOR Vulnerability Testing

idor-vulnerability-testing

zebbern/claude-code-guide

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

Django Access Control Review

django-access-review

sickn33/antigravity-awesome-skills

Guides security engineers through Django access-control and IDOR reviews by prioritizing investigation of authorization flows, ownership models, and queryset scoping before flagging issues in views, DRF viewsets, or ORM queries.

API Gateway Log Analysis

analyzing-api-gateway-access-logs

mukul975/Anthropic-Cybersecurity-Skills

Parses API Gateway access logs (AWS, Kong, Nginx) to surface anomalies such as BOLA/IDOR, rate-limit bypass, credential scanning, and injection attempts using pandas to spot unusual request distributions during investigations or rule-building.

Detect API Enumeration Attacks

detecting-api-enumeration-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect and prevent API enumeration attacks such as BOLA and IDOR by monitoring sequential identifier access, mixed authorization failures, and abnormal request rates across gateways, SIEMs, and logs.

Exploiting IDOR Vulnerabilities

exploiting-idor-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through identifying and exploiting IDOR flaws, covering endpoint mapping, Burp Authorize setup, horizontal/vertical access checks, and non-obvious request vectors to confirm broken object-level authorization.

BOLA API Testing Guide

testing-api-for-broken-object-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Guides pentesters through detecting Broken Object Level Authorization in REST and GraphQL APIs by enumerating object IDs, intercepting requests, manipulating identifiers, and verifying per-object access controls during OWASP API1 assessments.

Mobile API Auth Testing

testing-mobile-api-authentication

mukul975/Anthropic-Cybersecurity-Skills

Assess mobile backend APIs for authentication and authorization weaknesses, covering JWT/OAuth flaws, insecure token handling, session fixation, IDOR, and privilege escalation during penetration tests of mobile apps.

1

Language