django-access-review

What problem does it solve?

This Skill helps identify and fix critical access control vulnerabilities, such as Insecure Direct Object References (IDOR), in Django applications, ensuring that users can only access data they are authorized to see.

Core Features & Use Cases

• Authorization Model Analysis: Understand how permissions are implemented in a Django codebase.
• Attack Surface Mapping: Identify endpoints and resources that handle sensitive user data.
• Vulnerability Tracing: Trace code flows to pinpoint gaps in access control logic.
• Use Case: Reviewing a Django REST Framework API to ensure that a user logged in as 'user_a' cannot access or modify the data belonging to 'user_b' by simply manipulating an ID in the URL.

Quick Start

Analyze the Django codebase at '/path/to/project' for potential IDOR vulnerabilities.