Advanced automated IDOR testing tool with UUID fuzzing, JWT analysis, GraphQL support, POST request fuzzing, and smart ID parameter discovery.
-
Updated
Mar 18, 2026 - Python
Advanced automated IDOR testing tool with UUID fuzzing, JWT analysis, GraphQL support, POST request fuzzing, and smart ID parameter discovery.
Official write-up for the E-Bazaar spotlight challenge from ISSessions FantasyCTF 2026. Covers IDOR, business logic bypasses, and insecure cookie manipulation.
Add a description, image, and links to the idor-exploitation topic page so that developers can more easily learn about it.
To associate your repository with the idor-exploitation topic, visit your repo's landing page and select "manage topics."