Scan a recruitment or HR API to check if one candidate's data leaks to another candidate.
Gate a CI pipeline so a build fails if a broken authorization bug is found.
Run repeatable, evidence producing authorization tests instead of manual security review sessions.
Check an API for sequential or guessable object IDs that make data easier to enumerate.
| jbarach2012/authprobe | internrobotics/sim1 | kurt-chan/ai-job-scraper | |
|---|---|---|---|
| Stars | 141 | 141 | 141 |
| Language | Python | Python | Python |
| Setup difficulty | easy | hard | moderate |
| Complexity | 3/5 | 5/5 | 3/5 |
| Audience | developer | researcher | general |
Figures from each repo's GitHub metadata at analysis time.
Only run it against APIs you own or have explicit permission to test.
AuthProbe is a security testing tool that checks whether an API lets one user read another user's private data by mistake. This class of bug is called Broken Object Level Authorization, or BOLA, and it has been the top risk on the OWASP API security list since 2019. AuthProbe is built specifically with recruitment and hiring APIs in mind, since those systems hold a lot of private candidate data, though the same checks apply to any API described by an OpenAPI specification. The tool works by logging in as two or more identities that you control, then walking through the objects each identity can see. It compares what each identity is allowed to fetch, and flags cases where one identity can pull up a record that belongs to someone else. This kind of flaw is hard to catch with a web application firewall or a single identity scanner, because the request itself looks perfectly normal, the problem only shows up when you compare what two different users can access. To try it out, you clone the repository, install it with pip, then run a built in demo that spins up both a vulnerable and a secure sample API and scans each one, showing example findings for the vulnerable one and a clean result for the secure one. To scan a real target, you write a small configuration file listing the target's base URL, its OpenAPI spec location, and at least two identities with their own login credentials, then run the scan command. AuthProbe checks for several related problems, including broken object level authorization, sequential ID enumeration, missing authentication entirely, numeric identifiers that are easy to guess, and status codes that let an attacker confirm whether an ID exists. It can output JUnit XML and exit with a non-zero status code, so it can be wired into a continuous integration pipeline to block a build if these issues are found. The project explicitly states it is meant for authorized use only, and it refuses to run against a non-local target unless you confirm you have permission. It is released under the Apache 2.0 license.
A command line scanner that logs in as multiple users to catch APIs that leak one person's data to another.
Mainly Python. The stack also includes Python, OpenAPI, JUnit XML.
Use freely for any purpose, including commercial use, as long as you keep the copyright notice, under the Apache 2.0 license.
Setup difficulty is rated easy, with roughly 5min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
Don't trust strangers blindly. Verify against the repo.