Skip to content

the4ingmaster/idor-hunter

Repository files navigation

🛡️ IDOR-Hunter

Advanced Automated IDOR Detection Tool
Built for Pentesters & Bug Bounty Hunters


⚡ Overview

IDOR-Hunter is an advanced automation tool designed to detect
Insecure Direct Object Reference (IDOR) vulnerabilities across:

  • 🌐 Web Applications
  • 🔌 APIs
  • 🔐 JWT-based Authentication Systems
  • ⚡ GraphQL Endpoints

🔥 Features

Core Capabilities

  • 🔢 Numeric ID Fuzzing
  • 🧬 UUID Fuzzing
  • 📬 POST Request Fuzzing
  • 🔍 Automatic ID Parameter Discovery
  • 📊 Response Diff Analysis

Advanced Testing

  • 🔐 JWT Token ID Manipulation
  • ⚡ GraphQL IDOR Detection
  • 🍪 Cookie-based Authentication Support
  • 🪪 Header-based Authentication
  • 📂 Burp Request Import

Built for Performance

  • ⚙️ Cross Platform (Windows / Linux / macOS)
  • 🚀 Fast & Lightweight
  • 🧠 Smart Detection Logic

🖥️ Preview

def print_banner():
    banner = r"""

 ██╗██████╗  ██████╗ ██████╗      ██╗  ██╗██╗   ██╗███╗   ██╗████████╗███████╗██████╗
 ██║██╔══██╗██╔═══██╗██╔══██╗     ██║  ██║██║   ██║████╗  ██║╚══██╔══╝██╔════╝██╔══██╗
 ██║██║  ██║██║   ██║██████╔╝     ███████║██║   ██║██╔██╗ ██║   ██║   █████╗  ██████╔╝
 ██║██║  ██║██║   ██║██╔══██╗     ██╔══██║██║   ██║██║╚██╗██║   ██║   ██╔══╝  ██╔══██╗
 ██║██████╔╝╚██████╔╝██║  ██║     ██║  ██║╚██████╔╝██║ ╚████║   ██║   ███████╗██║  ██║
 ╚═╝╚═════╝  ╚═════╝ ╚═╝  ╚═╝     ╚═╝  ╚═╝ ╚═════╝ ╚═╝  ╚═══╝   ╚═╝   ╚══════╝╚═╝  ╚═╝

                    🔐 IDOR-Hunter
        Advanced IDOR Detection Framework
                by Anand Mahajan
    """
    print(banner)

About

Advanced automated IDOR testing tool with UUID fuzzing, JWT analysis, GraphQL support, POST request fuzzing, and smart ID parameter discovery.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages