Proof of concept for exploitation of the vulnerability described in CVE-2025-11554, which concerns the possibility of a privilege escalation through arbitrary requests to user types change endpoint in the i-Educar software.
An intentionally Vulnerable API for you to hack..completely ridiculous API (crAPI)
Matrix-driven authorization testing for HTTP APIs — turn an authorization matrix into positive & negative tests that catch BOLA, BFLA, privilege escalation, and authorization drift in CI/CD.
Add a description, image, and links to the bfla topic page so that developers can more easily learn about it.
To associate your repository with the bfla topic, visit your repo's landing page and select "manage topics."