AuraInspector: Open-Source Misconfiguration Detection for Salesforce Aura

Mandiant released AuraInspector, an open-source tool to detect and audit misconfigurations in Salesforce Aura/Experience Cloud that can expose sensitive data to guest users. The report details automated enumeration via Aura getConfigData/getItems with action bulking and sortBy to bypass the 2,000-record limit, and an unauthenticated GraphQL Aura controller enabling cursor-based pagination for comprehensive record retrieval; it also finds record lists, home URLs, and self‑registration status. Mandiant provides a Burp Suite BCheck and a Google SecOps UDM query for detection, recommends least-privilege auditing of Guest User permissions and sharing rules, and emphasizes these are configuration issues, not product flaws; the released tool is read-only with data extraction functionality withheld.