auth-sec

What problem does it solve?

Provides a concise routing and decision layer for authentication and authorization testing so practitioners can quickly determine which deeper auth topics to run next. It eliminates guesswork when targets expose mixed authentication mechanisms (login flows, sessions, tokens, SSO) and when it's unclear whether issues are authentication, authorization, or protocol misconfiguration.

Core Features & Use Cases

• Decision Router: Helps triage whether to start with login/session testing, object-level authorization, token analysis (JWT/OAuth), or SSO/OIDC/SAML reviews.
• Skill Map Linking: Direct links to focused skills for Auth Bypass, IDOR/BOLA, JWT/OAuth attacks, CSRF, CORS, and SAML assertion analysis.
• Recommended Flow: Walks through confirming the auth model, verifying session boundaries, checking object permissions, then drilling into tokens and protocol details.
• Use Case: During reconnaissance of a web app that includes both credentialed login and an SSO federation, use this router to pick the correct downstream tests and avoid wasted effort.

Quick Start

Classify the target authentication model and recommend whether to prioritize login/session testing, object authorization checks, token/protocol audits, or SSO assessments.