auth-sec

Start by confirming the authentication model and session boundaries, then test object-level and function-level authorization, then move to token, cross-origin, and protocol details. This router maps each area to a dedicated skill covering login bypass, IDOR, JWT/OAuth, CSRF, CORS, and SAML.

Authentication bypass targets login mechanics such as password reset, 2FA, enumeration, and brute-force protections. IDOR testing targets broken object-level authorization (BOLA/BFLA), where authenticated users access objects or functions belonging to other users or tenants.

Test JWT/OAuth token attacks when you suspect algorithm confusion, key trust issues, claim abuse, or token forgery. Test OAuth/OIDC misconfiguration when the concern is redirect URI validation, state, nonce, PKCE, or account binding in the authorization flow.

Yes, it routes to dedicated skills for both. The CSRF skill covers tokens, SameSite, JSON CSRF, and login CSRF, while the CORS skill covers reflected Origin, credentialed cross-origin reads, and allowlist bypass.

Test SAML when the target uses enterprise federation or SSO. The SAML skill covers assertion wrapping, signature validation, audience restriction, and ACS boundary issues, and is reached after confirming the identity protocol in use.