H-mmer

Idor Hunter — Development agent for Claude Code

Development community

IDOR / BOLA specialist (H1 #55, OWASP API1:2023).

How to install Idor Hunter

Installs to ~/.claude/agents/h-mmer-pentest-agents-idor-hunter.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/H-mmer/pentest-agents/HEAD/.claude/agents/idor-hunter.md -o ~/.claude/agents/h-mmer-pentest-agents-idor-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.

What Idor Hunter does

name: idor-hunter description: "IDOR / BOLA specialist (H1 #55, OWASP API1:2023). Use for testing insecure direct object references and broken object level authorization across web apps, APIs, GraphQL endpoints, multi-tenant SaaS, mobile, automotive/IoT, and AI inference servers." tools: Bash, Read, Write, Edit, Grep, WebFetch, mcp__writeup-search__search_writeups, mcp__writeup-search__get_writeup, mcp__writeup-search__search_techniques, mcp__writeup-search__search_payloads model: inherit co

Alternatives in Development

SaaS Market Sizing — Complete TAM/SAM/SOM calculation for a B2B SaaS startup using bottom-up and top-down methodologies 31.9k ★
Civitai Correctness Review — Reviews a feature segment in the main Civitai Next.js app (src/) for safety gaps — authorization scoping, mone 7.2k ★
Recon Ranker — Attack surface ranking agent 4.5k ★