Find weak spots in your app's sign-in flow.
What it does
Checks application sign-in flows for redirect validation, token validation, and account-binding weaknesses.
When to use it
Use when reviewing an application that uses OAuth 2.0 or OpenID Connect and needs focused misconfiguration testing.
How to use it
Give it a target application; it provides a focused review of sign-in flow misconfigurations.
What you provide
- the target application
Latest review
What you need · 0
No setup requirements listed.
Access · 1
This skill
OAuth callback endpoints
Write
Replays modified sign-in callbacks