idor-poc

What problem does it solve?

Exploit IDOR and BOLA vulnerabilities to access unauthorized resources in web applications, enabling controlled testing to verify and improve access controls.

Core Features & Use Cases

• Autorize integration for automatic authorization enforcement detection
• AuthMatrix workflow for multi-role access testing and matrix validation
• Authz lightweight authorization testing to assess endpoint protections
• Real-world use cases include testing user management endpoints like GET /api/user/{id}, document access, and cross-resource access scenarios

Quick Start

Set up your test project and run the IDOR/BOLA workflow to verify proper access controls across user roles