Advanced Automated IDOR Detection Tool
Built for Pentesters & Bug Bounty Hunters
IDOR-Hunter is an advanced automation tool designed to detect
Insecure Direct Object Reference (IDOR) vulnerabilities across:
- π Web Applications
- π APIs
- π JWT-based Authentication Systems
- β‘ GraphQL Endpoints
β¨ Core Capabilities
- π’ Numeric ID Fuzzing
- 𧬠UUID Fuzzing
- π¬ POST Request Fuzzing
- π Automatic ID Parameter Discovery
- π Response Diff Analysis
β¨ Advanced Testing
- π JWT Token ID Manipulation
- β‘ GraphQL IDOR Detection
- πͺ Cookie-based Authentication Support
- πͺͺ Header-based Authentication
- π Burp Request Import
β¨ Built for Performance
- βοΈ Cross Platform (Windows / Linux / macOS)
- π Fast & Lightweight
- π§ Smart Detection Logic
def print_banner():
banner = r"""
ββββββββββ βββββββ βββββββ βββ ββββββ βββββββ βββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββ βββ ββββββ ββββββββ ββββββββββββββββββββββββββββ
ββββββ ββββββ βββββββββββ βββββββββββ βββββββββ βββ βββ ββββββ ββββββββ
ββββββ ββββββ βββββββββββ βββββββββββ βββββββββββββ βββ ββββββ ββββββββ
βββββββββββββββββββββββ βββ βββ βββββββββββββββ ββββββ βββ βββββββββββ βββ
ββββββββββ βββββββ βββ βββ βββ βββ βββββββ βββ βββββ βββ βββββββββββ βββ
π IDOR-Hunter
Advanced IDOR Detection Framework
by Anand Mahajan
"""
print(banner)