Claim listing
Serhatcck/idor-in-ai-tools
IDOR / Broken Object-Level Authorization in AI agent tool-calling — a hands-on vulnerable lab. An LLM tool trusts the object id it is handed and skips the ownership check, so any user reads any tenant's data.
Claim your listing to add a tagline, logo, and category. Verified maintainers get a Verified Publisher badge and priority placement on the AgentRank index.
Leave your email to claim this listing. GitHub verification coming soon.