authentication

Files (66)

• SKILL.md
• BOT_DETECTION.md · reference/
• CAPTCHA_BYPASS.md · reference/
• INDEX.md · reference/
• PASSWORD_CREDENTIAL_MANAGEMENT.md · reference/
• adfs-exploitation.md · reference/
• authentication-cheat-sheet.md · reference/
• authentication-index.md · reference/
• authentication-principles.md · reference/
• authentication-quickstart.md · reference/
• authentication-resources.md · reference/
• default-credentials.md · reference/
• jwt-advanced.md · reference/
• jwt-quickstart.md · reference/
• jwt_security_resources.md · reference/
• ntlm-http-listener.py · reference/
• oauth-index.md · reference/
• oauth-quickstart.md · reference/
• oauth-resources.md · reference/
• backup-codes.md · reference/scenarios/2fa/
• brute-force-otp.md · reference/scenarios/2fa/
• code-reuse.md · reference/scenarios/2fa/
• direct-endpoint-access.md · reference/scenarios/2fa/
• email-sms-extraction.md · reference/scenarios/2fa/
• otp-leakage.md · reference/scenarios/2fa/
• otp-parameter-manipulation.md · reference/scenarios/2fa/
• predictable-codes.md · reference/scenarios/2fa/
• race-condition.md · reference/scenarios/2fa/
• response-manipulation.md · reference/scenarios/2fa/
• session-pre-2fa.md · reference/scenarios/2fa/
• alg-confusion.md · reference/scenarios/jwt/
• claim-tampering.md · reference/scenarios/jwt/
• ecdsa-nonce-reuse.md · reference/scenarios/jwt/
• jku-injection.md · reference/scenarios/jwt/
• jwe-nested-token.md · reference/scenarios/jwt/
• jwk-injection.md · reference/scenarios/jwt/
• jwks-trust-store-overwrite.md · reference/scenarios/jwt/
• kid-path-traversal.md · reference/scenarios/jwt/
• none-algorithm.md · reference/scenarios/jwt/
• psychic-signatures-cve-2022-21449.md · reference/scenarios/jwt/
• signature-stripping.md · reference/scenarios/jwt/
• weak-secret-crack.md · reference/scenarios/jwt/
• x5u-x5c-injection.md · reference/scenarios/jwt/
• code-theft-postmessage.md · reference/scenarios/oauth/
• csrf-state.md · reference/scenarios/oauth/
• implicit-flow-attacks.md · reference/scenarios/oauth/
• parameter-manipulation.md · reference/scenarios/oauth/
• pkce-downgrade.md · reference/scenarios/oauth/
• redirect-uri-manipulation.md · reference/scenarios/oauth/
• scope-escalation.md · reference/scenarios/oauth/
• ssrf-client-registration.md · reference/scenarios/oauth/
• credential-dumping.md · reference/scenarios/password-attacks/
• credential-stuffing.md · reference/scenarios/password-attacks/
• db-hash-lateral-movement.md · reference/scenarios/password-attacks/
• dictionary-attack.md · reference/scenarios/password-attacks/
• encrypted-container-cracking.md · reference/scenarios/password-attacks/
• hash-cracking.md · reference/scenarios/password-attacks/
• keylogging.md · reference/scenarios/password-attacks/
• online-brute-force.md · reference/scenarios/password-attacks/
• pass-the-hash.md · reference/scenarios/password-attacks/
• …and 6 more

SKILL.md (first lines)

# Authentication

Test authentication mechanisms including login security, token handling, 2FA, CAPTCHA, and bot detection.

## Techniques

| Type | Key Vectors |
|------|-------------|
| **Auth Bypass** | Default credentials, logic flaws, response manipulation |
| **ADFS/SAML** | Golden SAML, token signing cert theft, assertion manipulation, SAML wrapping |
| **JWT** | Algorithm confusion, key injection, claim tampering, token forging |
| **OAuth** | Redirect manipulation, CSRF, token leakage, scope abuse |
| **Password** | Brute force, credential stuffing, password policy bypass |
| **2FA Bypass** | Response manipulation, direct endpoint access, code reuse, race conditions |
| **CAPTCHA Bypass** | Missing server validation, token reuse, OCR, parameter manipulation |
| **Bot Detection** | Behavioral biometrics simulation, fingerprint randomization, stealth mode |

## Tools

**PasswordGenerator** (`tools/password_generator.py`):
```python
from tools.password_generator import generate_password
password = generate_password(hint_text="8-16 chars, uppercase, numbers")
```

**CredentialManager** (`tools/credential_manager.py`):
```python
from tools.credential_manager import CredentialManager
mgr = CredentialManager()
mgr.store_credential(target="example.com", username="test", password="pass")
```

## Workflow

1. Analyze auth implementation (forms, tokens, 2FA, CAPTCHA)
2. Test bypass vectors per technique type
3. Use Playwright MCP with human-like behavior (typing 80-200ms, random pauses)
4. Capture evidence (screenshots, network logs, tokens)
5. Document findings with PoC scripts

## Reference

- `reference/authentication*.md` - Auth bypass techniques, payloads, and resources
- `reference/jwt*.md` - JWT attack techniques and cheat sheets
- `reference/oauth*.md` - OAuth vulnerability testing
- `reference/scenarios/password-attacks/*.md` - Password attack vectors (spray, stuffing, cracking, PtH)
- `reference/adfs-exploitation.md` - ADFS, Golden SAML, federation attacks
- `reference/scenarios/2fa/*.md` - 2FA bypass methods
- `reference/CAPTCHA_BYPASS.md` - 11 CAPTCHA bypass techniques
- `reference/BOT_DETECTION.md` - Bot detection evasion strategies
- `reference/PASSWORD_CREDENTIAL_MANAGEMENT.md` - Tool usage guide

From transilienceai/communitytools, MIT.

More from transilienceai/communitytools