hunt-idor

What problem does it solve?

This Skill solves the challenge of discovering and proving Insecure Direct Object References (IDOR) so you can access or modify other users’ objects without authorization.

Core Features & Use Cases

• Attack-surface guided IDOR hunting: Maps request patterns and ID carriers across REST and GraphQL to find high-probability endpoints for cross-object access.
• Reproducible proof and impact validation: Replays victim object IDs under an attacker account across HTTP methods to confirm real state or data differences (e.g., 200 vs expected 403/404).
• Report-grade exploitation workflow: Identifies likely root causes (route-level vs object-level authorization, GraphQL field-level gaps, multi-tenant isolation failures) and supports chaining with related skills.

Quick Start

Use hunt-idor to test a target for IDOR by replaying a known victim object ID as an attacker and documenting the exact differential between expected authorization and observed responses.