ai-security-session

You can automate BOLA and IDOR testing by using Playwright session management to coordinate multi-user flows, validating access controls and data exposure across different user contexts. This skill orchestrates interactive browser sessions to validate these vulnerabilities.

An interactive web security testing session is a controlled, browser-driven environment for manual vulnerability discovery. It coordinates Playwright actions via a session API to navigate pages, interact with elements, and test endpoints dynamically.

Yes, you can bootstrap session context directly from existing scan data. This allows you to navigate known pages, test specific endpoints, and capture screenshots for evidence without manually re-entering target URLs.

You capture evidence screenshots by driving navigation and element interaction through the session API during your security testing. The session orchestrator automatically records visual evidence of findings as you test endpoints.

The best way to manage multi-user access control testing is coordinating parallel Playwright sessions via a session API. This enables simultaneous validation of BOLA and IDOR vulnerabilities across different user roles and permissions.

Yes, you need the session API endpoints to start, drive, and end interactive security testing sessions. You call the session start endpoint with a target URL, execute actions via session ID, and delete the session when finished.