low-privilege-attacker

Tests privilege escalation: state-changing endpoints accessible beyond intended roles, missing authorization guards, and admin paths reachable by regular users