Possession takes a valid authenticated request and wears its skin under other identities, roles, stripped auth, and corrupted tokens to see what still opens. It exposes weak access control—dragging IDORs, privilege escalation, and auth bypasses out of the dark.
Open Resource Discovery (ORD) is a protocol that allows applications and services to self-describe their exposed resources and capabilities. This plugin enables generation of ORD document for CAP based applications.
Next-generation HTTP router for Go 1.25+ with type-safe handlers, RFC 9457 errors, and built-in OpenAPI generation. Minimal dependencies, blazing performance.