idor-broken-object-authorization

IDOR and broken object authorization testing playbook. Use when requests expose object identifiers, tenant boundaries, writable fields, or missing object-level authorization checks.

Try your first task

A source-grounded starter task has not been verified for this skill yet.

Inside SKILL.md

336 lines

Section content has not been verified for this skill yet.

Full source remains withheld under the current source-display policy. Read the author’s source ↗