access-control

1 post · all tags

1. 2026-05-12 Building a Concurrent Diffing Engine for IDOR/BOLA Triage How I built AirGap-Diffy - a local-only HTTP differential testing tool that replays endpoints accross auth sessions to surface access-control breaks without manual comparison red-team · tooling · python · access-control