auth-bypass
Hunt authentication/authorization bypass in route guards, role checks, tenant boundaries, and state-machine transitions.
Datos de origen
- Repositorio
- BitterSecurity/Decepticon
- Última actividad en el origen
- 2 de junio de 2026 a las 17:42
- Idioma detectado de SKILL.md
- inglés
- Estrellas
- 5565
- Forks
- 1053
Opciones de instalación
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Revisa los archivos de origen
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Mostrando SKILL.md
SKILL.md
Instrucciones de origen · Vista previa de solo lectura- name
- auth-bypass
- description
- Hunt authentication/authorization bypass in route guards, role checks, tenant boundaries, and state-machine transitions.
- metadata
- {"subdomain":"web-exploitation","when_to_use":"authentication authorization bypass route guard role check tenant boundary state machine transition session jwt"}
# Auth Bypass Playbook
## Targets
- Endpoints with role-based access
- Admin-only routes
- Tenant-scoped resources
- Multi-step auth flows (MFA, password reset)
## Common failure patterns
- Missing middleware on one route variant
- Trusting client-controlled role/tenant fields
- TOCTOU between check and action
- Alternate API versions lacking guard checks
## Validation
- Positive: low-priv session performs high-priv action.
- Negative: same request with expected guard path should deny.
Ver en GitHub