Cybersecurity

Offensive IDOR

IDOR (Insecure Direct Object Reference) testing checklist: object ID enumeration, horizontal/vertical privilege escalation, GUID predictability, indirect references via hashes, chained IDOR, and API endpoint IDOR. Use for web app pentests and bug bounty IDOR discovery.

Publisher / source

SnailSploit/Claude-Red (found on GitHub top repositories)

Upstream record

SnailSploit/Claude-Red

Version

Version 1

Published

2026-11-04

Publication review

Approved for publication · recorded passed scan 2026-11-04

Content fingerprint

03a3002dd293907c507c27107d44368668d26dcfccf6d9a25197b871f58f528e