domains / families / security / authbypass-authentication-flaws

authbypass-authentication-flaws

separate

Authentication bypass testing playbook. Use when assessing login flows, password reset logic, account recovery, MFA bypass, token predictability, brute-force resistance, and session boundary flaws.

When to use

• login flows
• password reset logic
• account recovery
• MFA bypass
• token predictability
• brute-force resistance
• session boundary flaws
• SQL injection-based login bypass

When not to use

• JWT/OAuth token attacks

Skill page

Source