API BAC Tester

Project: Loading... | 0 endpoints

Welcome, User

1. Project & Authentication

Select Project

Target Base URL

Token Source

Primary Bearer Token Attacker / Your token

Secondary Bearer Token Victim token for IDOR baseline

Use PHP Proxy Routes requests through proxy.php to bypass CORS.

Custom Headers JSON format