authentication-failures

To test JWT vulnerabilities, you can use attack scripts targeting weak signing algorithms, token tampering, and expired token reuse. This skill provides methodologies and scripts to systematically identify and exploit JSON Web Token implementation flaws.

Common MFA bypass techniques include exploiting predictable multi-factor flows, session fixation, and brute-forcing OTPs. This skill provides detailed attack trees and scripts to simulate bypassing flawed multi-factor authentication implementations.

Yes, you can use hydra and hashcat within the provided attack scripts to execute credential stuffing and brute force attacks. The skill integrates these dependencies to systematically test weak password policies on authentication endpoints.

Session fixation testing works by simulating attacks where predictable session tokens are forced upon a user and maintained post-authentication. This skill provides reference materials and scripts to identify session management issues across web applications and APIs.

You need Python to run the attack scripts, while Flask is included as a dependency for simulating vulnerable web environments. These tools provide the necessary framework to systematically test credential stuffing and authentication flaws.

The best way to enumerate authentication vulnerabilities systematically is by following a methodology-driven attack tree. This skill provides detailed guides covering brute-forcing, enumeration, session management issues, and MFA bypass to identify authentication flaws.