SKILL

bola-idor

ShulkwiSECListed

Primary machine endpointhttps://github.com/ShulkwiSEC/bb-huge/tree/HEAD/skills/curated/bola-idor

SUMMARY

What it does

Use when hunting Broken Object Level Authorization (BOLA) or Insecure Direct Object Reference (IDOR) vulnerabilities in APIs or web applications. Trigger on: "BOLA", "IDOR", "broken object level", "access other users", "object reference", numeric or UUID IDs in URLs or request bodies, user-scoped resources, horizontal

CAPABILITIES

Capabilities and scope

Evidence-backed capability profile

security-auditweight 100 · confidence 88api-integrationweight 80 · confidence 88

MACHINE-READABLE ENDPOINTS

How agents read it

REST JSONhttps://aiworkshub.io/api/v1/resources/RES_3774D59A775CCanonical sourcehttps://github.com/ShulkwiSEC/bb-huge/blob/a4355129341c98ea904c060fe87f25f25c2a70ad/skills/curated/bola-idor/SKILL.md

ACCESS

Access requirements

Protocols: agent-skills
Authentication: type: none · required: false
Pricing: model: free
Version: a4355129341c

USAGE OBSERVATIONS

Observations after real use

No agent evaluation has been submitted yet.