IDOR-Scanner - IDOR Scanner is a Burp Suite extension that automa

项目说明

IDOR Scanner

IDOR Scanner is a Burp Suite extension written in Python that detects potentially enumerable numeric fields in HTTP requests and responses. It le both passive and acti techniques to identify potential Insecure Direct Object Reference (IDOR) .

Features

Detection of Numeric Fields

The extension scans for numeric fields in parts of HTTP requests:

URL paths (e.g., /user/123/profile)

Query parameters (e.g., ?id=123)

JSON bodies (e.g., { "id": 123 })

URL-encoded bodies (e.g., id=123&customer_id=456)

Multipart/form-data bodies (e.g., form fields in file uploads)

Response body file references (detecting filenames such as 1.txt at the end of responses)

Passi

During Burp Suite's passi phase, the extension analyzes outgoing HTTP requests and their responses:

If numeric fields are found in the request, it generates an issue titled "Potentially IDOR Endpoint Detected," detailing the identified numeric fields.

If a response body contains a reference to a file named in the format <number>.txt (e.g., 2.txt), this is also flagged as a potential enumeration .

Acti

The extension performs an active scan by modifying detected numeric fields:

1. Sends the original request to establish a baseline response.
2. Modifies detected numeric fields by incrementing their .
3. Sends modified requests to the target.
4. Collects and reports responses in an issue titled "IDORs Scanned (Active)" for further analysis.

Confirmed IDOR Check

If any modified response returns a 200 OK and its response size differs from the original, an issue titled "IDORs Confirmed (Active)" with high se is generated, confirming a potential IDOR .

Manual IDOR Scanning Menu

In addition to automatic scanning, a "Scan IDOR" option is a when right-clicking on an issue in Burp Suite.

#### How It Works:
1. Right-click on an issue titled "Potentially IDOR Endpoint Detected."
2. Select "Extensions -> Scan IDOR" from the context menu.
3. The extension extracts numeric fields and performs an active scan, generating "IDORs Scanned (Active)" and "IDORs Confirmed (Active)" issues as needed.

This allows users to selectively test specific issues without scanning an entire site.

Integration with Burp Suite

Scanner Check: The extension integrates with both passive and acti.

Context Menu Integration: The "Scan IDOR" option integrates into the Burp Suite UI, enabling quick manual scans.

Easy Deployment

Written in Python, the extension is simple to install via the Extender tab in Burp Suite.

Installation

#### Clone the Repository:

#### Load the Extension in Burp Suite:
1. Open Burp Suite.
2. Go to the Extender tab and click Add.
3. Select Python as the extension type.
4. Browse to the IDOR-scanner.py file in this repository.
5. Click Next, then Done.

#### :
You should see the message:

in the Burp Suite extension output.

How It Works

Request and Response Analysis

The extension analyzes:

HTTP method

Path

Query string

Request body

Response body (looking for numeric file references)

Detection of Numeric Fields

Path segments: Detects numeric segments and filenames in the format <number>.ext (e.g., 2.txt).

Query parameters: Identifies numeric .

JSON bodies: Detects numeric fields.

URL-encoded bodies: Extracts numeric from form data.

Multipart/form-data bodies: Identifies numeric in uploaded form fields.

Response bodies: Checks if a filename (e.g., 1.txt) is referenced at the end of the response.

Passi

Detects numeric fields in requests and logs a "Potentially IDOR Endpoint Detected" issue.

Scans response bodies for file references matching <number>.txt, flagging them as potential IDOR attack .

Acti

1. Resends the original request.
2. Modifies numeric fields by incrementing their .
3. Sends modified requests.
4. Compares the responses:
- If any modified request returns a 200 OK with a different response size, an "IDORs Confirmed (Active)" issue is raised.

Manual IDOR Scanning (Context Menu)

1. Open the Issues tab in Burp Suite.
2. Select a "Potentially IDOR Endpoint Detected" issue.
3. Right-click and choose "Extensions -> Scan IDOR."
4. The extension will test for IDOR by modifying numeric fields.

#### If an IDOR is found:

A "IDORs Scanned (Active)" issue is generated.

If a confirmed is detected, a "IDORs Confirmed (Active)" issue is raised.

Usage

Automatic Scanning

Use Burp Suite normally. The extension will automatically analyze requests and responses:

Passive Scan: Detects numeric fields and file references in responses.

Active Scan: Modifies detected numeric and e responses for IDOR .

Re Issues

Go to the Scanner tab or the Issues list to review detected issues and analyze response .

Extension Name

The extension appears as "IDOR Scanner" in Burp Suite.

Contributing

Contributions, bug reports, and feature requests are welcome! Please open an issue or submit a pull request.

项目信息

开发语言：Python

Star 数：45

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify IDOR vulnerabilities in web applications. 🚀展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。