skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

hunt-idor

Identify and exploit IDOR vulnerabilities across REST and GraphQL APIs.

3|1|Updated Jul 2, 2026
Search Tags:#api-security#pentesting#idor#recon#vulnerability-research#bugbounty
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-idor-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-idor
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/hunt-idor
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill hunt-idor-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the difficulty of identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities, which are often missed by automated scanners but represent high-impact security flaws in multi-tenant applications.

Core Features & Use Cases

  • Attack Surface Mapping: Identifies vulnerable URL patterns, GraphQL queries, and API endpoints that reference user-owned resources.
  • Exploit Chaining: Provides advanced methodologies to chain simple IDORs into critical impacts like Account Takeover (ATO), financial fraud, and privilege escalation.
  • Validation Framework: Offers a rigorous gate-check process to ensure findings are reproducible and high-severity before reporting.

Quick Start

Use the hunt-idor skill to analyze the current target for IDOR vulnerabilities by mapping object references and testing cross-tenant access.

Frequently Asked Questions about hunt-idor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find IDOR vulnerabilities in REST and GraphQL APIs?▼

To find IDOR vulnerabilities in REST and GraphQL APIs, systematically enumerate object identifiers across different user privilege levels to validate authorization logic and uncover unauthorized data access.

What is the best way to chain simple IDORs into account takeover?▼

The best way to chain simple IDORs into account takeover is by mapping vulnerable URL patterns and GraphQL queries, then exploiting state-changing actions to escalate privileges across multi-tenant SaaS platforms.

Can I use this approach to test authorization logic in multi-tenant SaaS applications?▼

Yes, you can test authorization logic in multi-tenant SaaS applications by targeting API endpoints that reference user-owned resources and validating cross-tenant access controls across different privilege levels.

How do automated scanners compare to manual IDOR vulnerability research?▼

Manual IDOR vulnerability research provides advanced exploit chaining methodologies and rigorous validation frameworks that automated scanners often miss, ensuring findings are reproducible high-severity flaws before reporting.

How do I validate IDOR findings to ensure they are high-severity before reporting?▼

To validate IDOR findings before reporting, apply a rigorous gate-check process that ensures vulnerabilities are reproducible and represent high-impact security flaws like unauthorized data access or financial fraud.

Related Skills

Explore More Software Engineering Skills→
utkusenutkusen
1.3k

sast-idor

Identify and map IDOR vulnerabilities in REST or GraphQL endpoints.

Community
Advanced
jinyimeng01jinyimeng01
54

exploit-agent

Validate suspected web vulnerabilities and generate structured exploit reports.

Community
Advanced
jokken79jokken79
1

Burp Suite Web Application Testing

Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.

Community
Advanced
bpnrockstarbpnrockstar

hunt-misc

Detect access-control and logic bugs in web applications.

Community
Advanced