domains / families / security / auth-sec

auth-sec

separate

Entry P1 category router for authentication and authorization. Use when testing login flows, sessions, object authorization, JWT, OAuth, CORS, CSRF, and enterprise SSO weaknesses before any deeper auth topic skill.

When to use

• The target includes login, registration, password reset, 2FA, sessions, JWT, OAuth, or SSO
• You suspect object authorization flaws, cross-tenant access, cross-origin reads, CSRF, or protocol misconfiguration
• You need to decide whether to test authentication or authorization first

Skill page

Source