auth-bypass

Detect and exploit authentication and authorization bypasses in API endpoints.

518|47|Updated Nov 10, 2025

Search Tags:#session #identity #vulnerability-detection #privilege-escalation #auth-bypass

One-click install

npx skills add https://github.com/yhy0/CHYing-agent --skill auth-bypass

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: auth-bypass
Source: https://github.com/yhy0/CHYing-agent/tree/main/chying_agent/skills/auth-bypass
Command: npx skills add https://github.com/yhy0/CHYing-agent --skill auth-bypass

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the detection and exploitation of authentication and authorization bypasses, helping identify insecure access paths and privilege leakage.

Core Features & Use Cases

IDOR & Permission Testing: Validate direct object references and permission parameter manipulation.
JWT/Session Exploration: Assess token and session weaknesses, and common bypass paths.
Use Case: Rapidly assess API endpoints for unauthorized access and remediation gaps.

Quick Start

Example: Run the auth-bypass test against http://target.example/api/profile with a manipulated role field or token, and review access changes.