Skip to content

Add offensive-mass-assignment skill - #58

Open
rudycelekli wants to merge 1 commit into
SnailSploit:mainfrom
rudycelekli:skill/offensive-mass-assignment
Open

rudycelekli wants to merge 1 commit into
SnailSploit:mainfrom
rudycelekli:skill/offensive-mass-assignment

Conversation

@rudycelekli

Copy link
Copy Markdown

Summary

  • Adds a dedicated authorized-assessment skill for mass assignment / auto-binding, separate from IDOR and business-logic testing.
  • Covers finding bindable fields such as role, isAdmin, ownerId, and price, and confirming the server persisted them.
  • Updates the skill index, changelog, and generated manifest.

Test plan

  • python3 tools/build_manifest.py reports skill_count 80 and includes offensive-mass-assignment once

`offensive-mass-assignment` (api) — mass assignment: hidden role, owner, and price fields bound from JSON or form bodies, with an allowlist and DTO defender view.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant