IDOR Vulnerability Testing
This is a systematic framework for testing Insecure Direct Object Reference vulnerabilities, where you manipulate IDs or filenames to access resources you shouldn't have permission to see. You'll need at least two test accounts and Burp Suite to intercept and modify requests as you probe for cross-user access issues. It covers both database object references and static file references, walking through detection via parameter manipulation and enumeration. The skill passed Gen Agent Trust Hub audit but failed Snyk, which is worth noting if you're running this in production environments. Realistically, this is most useful if you're doing security assessments or penetration testing and need a structured approach to IDOR hunting rather than ad-hoc poking around.
- GitHub stars
- 39.4K
- last updated
- Jun 3, 2026
Install
$ npx -y skills add sickn33/antigravity-awesome-skills --skill 'IDOR Vulnerability Testing' --agent claude-codeInstalls into .claude/skills of the current project.
Files
This is a systematic framework for testing Insecure Direct Object Reference vulnerabilities, where you manipulate IDs or filenames to access resources you shouldn't have permission to see. You'll need at least two test accounts and Burp Suite to intercept and modify requests as you probe for cross-user access issues. It covers both database object references and static file references, walking through detection via parameter manipulation and enumeration. The skill passed Gen Agent Trust Hub audit but failed Snyk, which is worth noting if you're running this in production environments. Realistically, this is most useful if you're doing security assessments or penetration testing and need a structured approach to IDOR hunting rather than ad-hoc poking around.
Browse the repository on GitHubSponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sickn33/antigravity-awesome-skills
- Categories
- Testing & QA, Security
- First seen
- Jun 3, 2026
More from sickn33/antigravity-awesome-skills
All 708- Linux Production Shell Scripts
- Red Team Tools And Methodology
- Scanning Tools
- Shodan Reconnaissance And Pentesting
- SQLMap Database Penetration Testing
- Top Web Vulnerabilities
- Wireshark Analysis
- Docker Expert23.5K
- Nodejs Best Practices12.6K
- Typescript Expert10.4K
- Clean Code9.1K
- Api Security Best Practices7.9K
- Nextjs Best Practices6.7K
- Browser Automation5.8K
- Nextjs Supabase Auth5.8K
- Prisma Expert3.8K
- Playwright Skill3.5K
- 3d Web Experience3.4K
- Game Development3.3K
- Software Architecture3.3K
- Product Manager Toolkit3.2K
- Mobile Design3K
- Telegram Bot Builder3K
- Ui Ux Pro Max2.8K
Recommended
More Testing & QA
tddwbern/claude-instructionsRemind agent about TDD approach and continue conversation0skills.sh installs
browser-testing-with-devtoolsaddyosmani/agent-skillsTests in real browsers via Chrome DevTools MCP. Use when building or debugging anything that runs in a browser. Use when you need to inspect the DOM, capture co67.7Kskills.sh installs
playwright-automation-fill-in-formgithub/awesome-copilotAutomate filling in a form using Playwright MCP13.7Kskills.sh installs
swift-testing-protwostraws/swift-testing-agent-skillWrites, reviews, and improves Swift Testing code using modern APIs and best practices. Use when reading, writing, or reviewing projects that use Swift Testing.10.6Kskills.sh installs
cypress-docscypress-io/ai-toolkitSearch and extract Cypress information from official documentation (docs.cypress.io, cypress.io); prefer LLM markdown under /llm/* and refuse unverified API or 8.7Kskills.sh installs