skills.rest
asdfgh1445
asdfgh1445COMMUNITY
Explore all skills by this author →
GitHub

Strix•IDOR 测试

Analyzes object-level authorization in systems to detect IDOR vulnerabilities across APIs and interfaces.

735|96|Updated Apr 23, 2026
Search Tags:#authorization#security#vulnerability#microservices#access control#idor
One-click install
npx skills add https://github.com/asdfgh1445/ctf-super-hub --skill strix-idor
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Strix•IDOR 测试
Source: https://github.com/asdfgh1445/ctf-super-hub/tree/main/strix-idor
Command: npx skills add https://github.com/asdfgh1445/ctf-super-hub --skill strix-idor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps security testers and developers identify object-level authorization failures, such as IDOR and BOLA vulnerabilities, that could lead to cross-account data exposure and unauthorized actions.

Core Features & Use Cases

  • Vulnerability Testing: Guides users through testing object access controls across APIs, web, mobile, and microservices for IDOR and related issues.
  • Scope Analysis: Focuses on horizontal, vertical, cross-tenant, and cross-service access boundaries.
  • Use Case: Security auditors can assess whether an application properly enforces object ownership by systematically manipulating IDs in requests and analyzing responses.

Quick Start

Use this skill to review your application's object access logic by analyzing request parameters and server responses for authorization flaws.

Frequently Asked Questions about Strix•IDOR 测试

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is an IDOR vulnerability and how does it affect access control?▼

An IDOR vulnerability is an object-level authorization failure where access controls do not properly verify ownership of object references. It affects access control by enabling unauthorized cross-account data exposure and actions across horizontal, vertical, and cross-tenant boundaries.

How do I check for BOLA and cross-tenant access control flaws in APIs?▼

Checking for BOLA and cross-tenant access control flaws requires assessing API request parameters and server responses to verify object ownership enforcement. This systematically identifies horizontal and vertical authorization boundary failures across multiple platforms and communication protocols.

Does this IDOR testing approach work for web and mobile application security audits?▼

Yes, this IDOR testing approach works for web and mobile application security audits. It assesses authorization checks and object reference security impacts across APIs, web interfaces, mobile platforms, and microservices communication protocols robustly.

What are the limitations of analyzing object references for authorization flaws?▼

Analyzing object references for authorization flaws is limited to detecting object-level access control failures like IDOR and BOLA. It focuses strictly on horizontal, vertical, and cross-tenant boundary checks rather than broader authentication or input validation vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
DorianGalloDorianGallo
5

idor-broken-object-authorization

Detects IDOR and broken object-level authorization by testing object ownership across accounts.

Community
Advanced
carlheathcarlheath
9

Security Specialist

Assess software and infrastructure security vulnerabilities and threats.

Community
Advanced
gajjalaashok75-UIgajjalaashok75-UI
2

api-security-testing

Test REST and GraphQL APIs for authentication, authorization, and validation weaknesses.

Community
Advanced
naporin0624naporin0624
3

form-security-analyzer

Analyzes HTML forms for CSRF tokens, insecure actions, missing validation, hidden field exposure and misconfigurations, generating text or JSON reports.

Community
Intermediate