idor-testing - Systematic IDOR Vulnerability Testing
Provides a systematic workflow for identifying and validating IDOR vulnerabilities in web applications through reference manipulation, enumeration, and Burp Suite.
Tags
Updated: 2026-10-12Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Identify object references
- Map user IDs
- Manipulate request parameters
- Switch HTTP methods
- Enumerate references with Intruder
- Preserve workflow provenance
Inputs
- Target web application
- Attacker test account
- Victim test account
- Captured HTTP requests
- metadata.json
- ORIGIN.md
Outputs
- Assessment findings
- HTTP responses
- Enumerated object references
- Provenance-grounded review packet
Requirements
- Authorized security assessment
- Browser proxy capability
- Burp Suite