<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Authorization Bypass Testing

## curl — Authorization Testing
```bash
# IDOR enumeration
for id in $(seq 1 100); do
  curl -s -o /dev/null -w "%{http_code}" -H "Authorization: Bearer TOKEN" URL/api/users/$id
done

# Vertical privilege escalation
curl -H "Authorization: Bearer USER_TOKEN" URL/api/admin/users

# Role parameter tampering
curl -X PUT URL/api/users/me -H "Authorization: Bearer TOKEN" -d '{"role":"admin"}'
```

## ffuf — Forced Browsing
```bash
ffuf -u URL/FUZZ -w raft-medium-directories.txt -H "Cookie: session=USER_SESSION" -mc 200
```

## Burp Autorize — Automated AuthZ Testing
Configure low-privilege token in Autorize and browse as admin to detect missing checks.

