Find the right test for login and access flaws.
What it does
Guides users to the appropriate security-testing skill for login, access-control, browser-boundary, or identity-protocol issues.
When to use it
Use when assessing login, session, authorization, cross-origin, or identity-protocol weaknesses, or deciding whether authentication or authorization should be tested first.
How to use it
Give it an authentication or authorization concern; it identifies the relevant testing topic and which checks should come first.
What you need · 7
Routes login bypass, password reset, 2FA, enumeration, and brute-force protection testing to this skill; whether installation is required to complete the workflow is unstated.
Routes object- and function-level permission issues to this skill; whether installation is required to complete the workflow is unstated.
Routes algorithm confusion, key trust, claim abuse, and token forgery testing to this skill; whether installation is required to complete the workflow is unstated.
Routes redirect URI, state, nonce, PKCE, and account-binding testing to this skill; whether installation is required to complete the workflow is unstated.
Access · 0
No additional actions listed.