Test ID formats and injection points for IDOR and access control vulnerabilities.
npx skills add https://github.com/blacklanternsecurity/red-run --skill idor
Please help me install this Agent Skill. Skill: idor Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/web/idor Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill idor
This Skill helps penetration testers identify and exploit Insecure Direct Object Reference (IDOR) and broken access control vulnerabilities, allowing unauthorized access to sensitive data or functionality.
/api/users/{id}/profile is vulnerable to IDOR. They use this Skill to systematically test different user IDs while authenticated as a low-privilege user to see if they can access other users' profiles or administrative functions.Use the idor skill to test for horizontal privilege escalation on the target endpoint '/api/users/123/profile' using your current session.
High-intent search queries and answers about installing and using this skill.
To test for IDOR vulnerabilities in an API, you need an authenticated session to systematically test various ID formats across URL paths, POST bodies, and headers to identify unauthorized data access.
Horizontal privilege escalation involves accessing another user's data at the same privilege level, while vertical escalation tests if low-privilege users can access higher-privilege administrative functions through parameter tampering.
Yes, you can test UUIDs and sequential IDs for broken access control by injecting these formats into various API endpoints to verify if unauthorized users can access sensitive data or functionality.
To start exploiting insecure direct object reference flaws, you need an authenticated session and knowledge of the target ID formats to perform parameter tampering across API injection points.
Testing access control flaws with parameter tampering is limited by your knowledge of ID formats and requires a valid authenticated session to effectively map horizontal and vertical privilege escalation vectors.
JuanMS20Configure GitHub authentication for Hermes Agent using git, gh CLI, or SSH credentials.
balsm-healthDetect security threats in Kubernetes audit logs by parsing JSON lines.
yhy0Detect and exploit server-side request forgery vulnerabilities in URL parameters.
florianbuetowAnalyze source code for broken access control vulnerabilities.