cyber-testing-api-for-broken-object-level-authorization

Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to determ

Jump to install

Repository: nexuslinkproductions/yuri-os
Last source activity: August 2, 2026 at 20:10
Detected SKILL.md language: English
Stars: 2
Forks: 0

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/nexuslinkproductions/yuri-os --skill cyber-testing-api-for-broken-object-level-authorization

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

2 files

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

cyber-abusing-dpapi-for-credential-access

[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] Extract DPAPI-protected secrets such as credentials and browser data offline and online.

2026-08-02

cyber-abusing-shadow-credentials-for-privesc

[LAB-GATED; discovery is not runtime authorization; offensive/dual-use — authorized-lab gate] Take over Active Directory user and computer accounts by writing alternate certificate keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, and Certipy, then authenticate via PKINIT.

2026-08-02

cyber-achieving-cmmc-level-2-compliance

>- Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD

2026-08-02

View all from this repository

name	cyber-testing-api-for-broken-object-level-authorization
description	Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to determ
hide	true

YURI skill adapter

Authoritative source: .claude/skills/cyber-testing-api-for-broken-object-level-authorization/SKILL.md

Authoritative source SHA-256: b58733efc887d5ce8a8173c5db72638fb2fa6c2395bbf6cf2ef23fd3a09f0a82

Source class: cyber-armed

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run node _SYSTEM/Scripts/skill-recall.mjs --show cyber-testing-api-for-broken-object-level-authorization and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.

cyber-testing-api-for-broken-object-level-authorization

Source facts

Install options

Review the source files

More from this repository

More from this repository

YURI skill adapter

YURI skill adapter