PyRank

Idor Python Packages

Python packages with the GitHub topic idor. Sorted by monthly downloads, with stars and forks.
ysc070528
granttrace

Evidence-driven API authorization security auditing tool for BOLA, IDOR and Mass Assignment testing.

2K 0 0
mattybellx
ansede-static

Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.

1K 15 0
kabiri-labs
overstep

Authorization regression testing for REST APIs and MCP servers in CI/CD. Define access policies as a matrix, generate positive and negative tests, and detect BOLA, BFLA, BOPLA and privilege escalation — with drift baselines, confidence grading and CWE/OWASP-tagged SARIF reports.

766 2 1
gusta-ve
wraith-sec

Pipeline-based offensive security scanner: recon and web vuln testing (XSS/SQLi/IDOR/BAC), every finding double-confirmed. Python, no core deps.

627 0 0
omarmohelal
sechelix

Most AI security tools try to find more. SecHelix tries to prove itself wrong: every candidate finding goes to an independent verifier whose only job is to disprove it. Open-source AppSec agent for Claude Code, Codex and Copilot.

569 1 0
josenieto
mcp-api-pentest

MCP server for autonomous API logic penetration testing. AI-driven detection of OWASP API Top 10 vulnerabilities (BOLA/IDOR) via multi-session authorization comparison. Supports Bearer, Basic, API Key, Cookie auth. Generates Markdown security audit reports with evidence.

387 1 0
Asttr0
authztrace

Authorization contract testing for IDOR/BOLA in CI

274 3 0
mattybellx
guardmarly

Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.

195 15 0
RalianENG
idotaku

mitmproxy-based IDOR detection tool that tracks parameter flows to find insecure direct object references

153 1 0
SYCO7
heretic-agent

Autonomous AI agent that finds business-logic vulnerabilities (BOLA/IDOR, data exposure, price/workflow). Oracle-verified, ~0 false positives. Validated live on crAPI, Juice Shop, VAmPI.

95 0 0
commonhuman-lab
gloomproxy-sdk

Browse a target normally and watch the attack surface graph build itselfc — all correlated in real time. Then hit it with distributed scanner plugins, replay and fuzz interesting requests, and manage auth across the whole engagement from a single UI.

77 5 1