IDOR Vulnerability Testing
This is a security testing template for finding IDOR vulnerabilities where users can access resources they shouldn't by manipulating IDs or filenames in requests. You'd use it when pentesting web apps that handle user-specific data, ideally with Burp Suite and at least two test accounts to verify unauthorized access across users. It covers both database object references and static files, walks through detection via parameter manipulation, and includes remediation strategies. Originally from the antigravity-awesome-skills collection, now part of davila7's template repo with 27.7k stars. Obviously only use this with written authorization for security testing, but it's a solid starting point for systematic IDOR assessments if you're doing legitimate security work.
- GitHub stars
- 30.2K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add davila7/claude-code-templates --skill 'IDOR Vulnerability Testing' --agent claude-codeInstalls into .claude/skills of the current project.
Files
This is a security testing template for finding IDOR vulnerabilities where users can access resources they shouldn't by manipulating IDs or filenames in requests. You'd use it when pentesting web apps that handle user-specific data, ideally with Burp Suite and at least two test accounts to verify unauthorized access across users. It covers both database object references and static files, walks through detection via parameter manipulation, and includes remediation strategies. Originally from the antigravity-awesome-skills collection, now part of davila7's template repo with 27.7k stars. Obviously only use this with written authorization for security testing, but it's a solid starting point for systematic IDOR assessments if you're doing legitimate security work.
Browse the repository on GitHubSponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/davila7/claude-code-templates
- Categories
- Testing & QA, Security
- First seen
- Jun 3, 2026
More from davila7/claude-code-templates
All 618- Linux Privilege Escalation
- Linux Production Shell Scripts
- MCP Integration
- Metasploit Framework
- Network 101
- PDF Processing
- PDF Processing Pro
- Pentest Checklist
- Pentest Commands
- Plugin Settings
- Plugin Structure
- Privilege Escalation Methods
- Red Team Tools And Methodology
- Security Scanning Tools
- SEO Optimizer
- Shodan Reconnaissance And Pentesting
- Skill Development
- SMTP Penetration Testing
- SQL Injection Testing
- SQLMap Database Penetration Testing
- SSH Penetration Testing
- Top 100 Web Vulnerabilities Reference
- Windows Privilege Escalation
- Wireshark Network Traffic Analysis
Recommended
More Testing & QA
SMTP Penetration Testingdavila7/claude-code-templatesThis skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "0skills.sh installsSQL Injection Testingdavila7/claude-code-templatesThis skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "0skills.sh installs
exp-mock-usage-analysisdotnet/skillsAudits .NET test mock usage by tracing each mock setup through the production code's execution path to find dead, unreachable, redundant, or replaceable mocks. 0skills.sh installsexp-test-maintainabilitydotnet/skillsDetects duplicate boilerplate, copy-paste tests, and structural maintainability issues across .NET test suites. Use when the user asks to reduce repetition, con0skills.sh installs
zephyr-coverage-analysishoangnguyen0403/agent-skills-standardAnalyze Zephyr test case coverage for a Jira user story and produce a QE management report with metrics, risk scoring, and prioritized recommendations.0skills.sh installs
testingtursodatabase/tursoHow to write tests, when to use each type of test, and how to run them. Contains information about conversion of `.test` to `.sqltest`, and how to write `.sqlte0skills.sh installs