Identifies and exploits Insecure Direct Object Reference (IDOR) vulnerabilities by manipulating object identifiers (numeric IDs, UUIDs, slugs) in API requests and URLs, using Burp Suite proxy history, Intruder, and the Authorize extension to test object-level authorization across sessions.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-idor-vulnerabilitiesnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-idor-vulnerabilities -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-idor-vulnerabilities -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/exploiting-idor-vulnerabilitiesgh skill install mukul975/Anthropic-Cybersecurity-Skills exploiting-idor-vulnerabilitiesgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-idor-vulnerabilities ~/.claude/skills/exploiting-idor-vulnerabilities # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-idor-vulnerabilities ~/.agents/skills/exploiting-idor-vulnerabilities # Codex, Cursor, Gemini CLI, Copilot, OpenCode