Metadata-Version: 2.1
Name: idor-finder
Version: 0.1.0
Summary: Powerful IDOR discovery tool with UUID-aware fuzzing and async engine
Home-page: https://github.com/ashutosh0x/idor-finder
Author: Ashutosh Kumar Singh
Author-email: ashutoshkumarsingh0x@gmail.com
License: MIT
Keywords: security,idor,fuzzing,bugbounty,pentest
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3 :: Only
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: OS Independent
Classifier: Topic :: Security
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Information Technology
Classifier: Intended Audience :: System Administrators
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: httpx==0.27.0
Requires-Dist: beautifulsoup4==4.12.3
Requires-Dist: yarl==1.9.4
Requires-Dist: pydantic>=2.8.2

### IDOR Finder

Powerful IDOR discovery tool with UUID-aware fuzzing, parameter extraction, async engine, and HTML/CSV/JSON reports.

### Install

```bash
pip install idor-finder
```

### Usage

```bash
idor-finder https://target/app?user_id=123 --method GET --report-format html --wordlist idor_finder/data/idor_wordlist.txt --sensitive idor_finder/data/sensitive_keywords.txt
```

From file:

```bash
idor-finder --url-file urls.txt --auth-config idor_finder/examples/config_example.json --report-format json
```

### Features

- Extracts parameters from query strings, paths (numeric, UUID), forms, JSON bodies
- Generates numeric sequences, high IDs, and realistic UUID alternatives
- Async fuzz engine with concurrency and rate limiting
- Matches by status anomalies, content length deltas, and sensitive keywords
- Exports HTML, CSV, and JSON reports

### Notes

- Provide your own authentication config in `examples/config_example.json`.
- Wordlist in `data/idor_wordlist.txt` is normalized and expanded at runtime.


