websex_idor_sweep_probe
Sweep object IDs through a URL template under one identity, build a status/shape oracle, and flag IDOR hits for replay validation.
Instructions
Sweep object ids through a {id} template under one identity to build a status/shape oracle, then replay hits with websex_idor_probe.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ids | Yes | ||
| method | No | GET | |
| headers | Yes | ||
| max_requests | No | ||
| url_template | Yes | ||
| engagement_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||