auth-bypass

What problem does it solve?

This Skill automates the detection and exploitation of authentication and authorization bypasses, helping identify insecure access paths and privilege leakage.

Core Features & Use Cases

• IDOR & Permission Testing: Validate direct object references and permission parameter manipulation.
• JWT/Session Exploration: Assess token and session weaknesses, and common bypass paths.
• Use Case: Rapidly assess API endpoints for unauthorized access and remediation gaps.

Quick Start

Example: Run the auth-bypass test against http://target.example/api/profile with a manipulated role field or token, and review access changes.