broken-access-control

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

CVE-2023-22515: Confluence Broken Access Control Exploit

CVE-2023-22515

Web Application Penetration Tester (WAPT) Notes

Better version of PwnFox

This repository contains OWASP Top 10 CTF challenges designed to test your skills in web application security. Each category includes both "easy" and "hard" challenges.

Slides and PoCs for my DEF CON 33 & HOU.SEC.CON 2025 talk on overlooked attack surfaces across Apple's ecosystem.

Map which users can reach each GraphQL query/mutation from an introspection schema (authz testing)

🛡️ Multi-tenant isolation auditor — proves whether tenant A can reach tenant B's data. Seeds two tenants, attacks one as the other, and reports confirmed BOLA/IDOR leaks with canary-backed evidence. CI merge gate, near-zero false positives. One command: docker compose up -d

A Duolingo hack that lets you stack up gems

L'obiettivo di questo progetto è di mostrare come è possibile usare dei tag degli unit test per cercare di garantire la verifica di aspetti specifici di una applicazione.

Point an app at two logged-in users and it finds the broken access control (IDOR). Deterministic browser perception + cross-identity authz testing for AI agents — drives your real Chrome over MCP or runs headless. Open-core, local, no account.

Bachelor’s Work - WEB programming

BAC-Bench data and research overview for Absentia, a broken access control detector. Code release planned by December 2026.

CVE-2025-41090 (brokeCLAUDIA): Broken access control in microCLAUDIA, the anti-ransomware platform by CCN-CERT.

BuggyBuy: Deliberately Vulnerable MERN Stack Web Application for Security Testing

VulnWeb - Learn & Fix Common Security Flaws

Authorization regression testing for REST APIs and MCP servers in CI/CD. Define access policies as a matrix, generate positive and negative tests, and detect BOLA, BFLA, BOPLA and privilege escalation — with drift baselines, confidence grading and CWE/OWASP-tagged SARIF reports.

The most hackable Ticket-Shop!