Building a Concurrent Diffing Engine for IDOR/BOLA Triage

Tue, 12 May 2026 00:00:00 +0000

During my time at Synack Red Team, the scope of real-world penetration tests initially felt overwhelming to me. Us researchers would often be assigned massive scopes of data to audit that is unlike anything seen in a lab environment such as HackTheBox.

Fellow SRT’ers suggested I pick a vulnerability class, and get good at it - I found myself doing well with Access Control / IDOR vulnerabilites and ended up landing my first critical (CVSS 9.1) bug bounty that way.

Evilmouse

Sun, 15 Feb 2026 00:00:00 +0000

Evilmouse is a covert keystroke injector hidden inside a fully functional mouse, similar in concept to a Rubber Ducky tool. As soon as it connects, it can autonomously execute commands and begin compromising the system.

The Idea

These days, everyone that’s been through basic job security awareness training knows that a USB stick plugged into a computer is suspicious. A mouse, however, might not appear suspicious at all, especially when its functionality is preserved.

Red-Team on Jonah Owen

Building a Concurrent Diffing Engine for IDOR/BOLA Triage

Evilmouse

The Idea