Find authentication gaps in your API.
What it does
Assesses API authentication controls and produces security findings with remediation advice.
When to use it
Use for authorized assessments of API authentication bypasses, JWT validation, API key handling, and token lifecycle security.
How to use it
Give it an authorized target API, test credentials, and supporting documentation; it returns authentication findings and remediation advice.
What you provide
- the target API URL
- Your files
Good to know
- cannot be undone: target API
- works out of sight
Latest review
What you need · 7
Requires test accounts for at least two roles: a regular user and an administrator.
Requires Burp Suite Professional with the JSON Web Tokens and JWT Editor extensions.
Requires Python 3.10 or newer.
Access · 1
This skill
target API
Write
Submits authentication and account-change probes (irreversible)