IDOR/BOLA Assistant v3.1.0

IDOR/BOLA Assistant v3.1.0 focuses on reducing passive-discovery false positives.

Highlights:

• Evidence-qualified candidate scoring with Active and Suppressed dispositions.
• Authentication-context headers and cookies, pagination, telemetry, and symbolic GraphQL variables no longer become normal candidates from weak signals.
• Reviewable Suppressed workspace with repeated-observation promotion.
• Reversible endpoint- and host-scoped false-positive and allow rules.
• Rules persist metadata selectors only; raw identifiers and HTTP messages are never stored.
• 67 automated tests with 93.5% core line coverage.

Install:
Download idor-bola-assistant-3.1.0.jar and load it as a Java extension in Burp Suite.

IDOR/BOLA Assistant 2.0.0

Stable release of IDOR/BOLA Assistant 2.0.0.

• Ready-to-load Burp Suite extension JAR (Java 17 / Montoya API)
• CI-verified build: 15 tests passed
• Tested by GitHub Actions on Linux, macOS, and Windows
• SHA-256 checksum included

Install: Burp Suite > Extensions > Installed > Add > Java, then select idor-bola-assistant-2.0.0.jar.

Verify on Linux/macOS: sha256sum -c idor-bola-assistant-2.0.0.jar.sha256

v1.0

Add files via upload