Cybersecurity
IDOR
Hunt Insecure Direct Object Reference (CWE-639) — missing authorization checks on object IDs. Covers horizontal vs vertical privilege escalation, UUID vs integer guessing, and GraphQL introspection-driven IDOR discovery.
- Publisher / source
- BitterSecurity/Decepticon (found on GitHub top repositories)
- Upstream record
- BitterSecurity/Decepticon
- Version
- Version 1
- Published
- Publication review
- Approved for publication · recorded passed scan 2026-11-04
- Content fingerprint
ef2a0a0fa2912734b03350cdb820e09ea160e60505a2f2d77d7f140bfba3be53