skills.rest
gerald-ica
gerald-icaCOMMUNITY
Explore all skills by this author →
GitHub

Broken Authentication Testing

Identify and exploit authentication and session management vulnerabilities in web applications.

Updated Apr 6, 2026
Search Tags:#vulnerability assessment#penetration testing#session management#web application security#authentication testing
One-click install
npx skills add https://github.com/gerald-ica/dev-tool-configs --skill broken-authentication-testing-gerald-ica
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Broken Authentication Testing
Source: https://github.com/gerald-ica/dev-tool-configs/tree/main/gemini/skills/broken-authentication
Command: npx skills add https://github.com/gerald-ica/dev-tool-configs --skill broken-authentication-testing-gerald-ica

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill is designed to address the need for identifying and exploiting authentication and session management vulnerabilities in web applications, helping to prevent security breaches and unauthorized access.

Core Features & Use Cases

  • Authentication Mechanism Analysis: Understand the application's authentication architecture and map authentication endpoints.
  • Password Policy Testing: Evaluate password requirements and enforcement to identify potential security gaps.
  • Credential Enumeration: Test for username enumeration vulnerabilities and password reset security.
  • Brute Force Testing: Test account lockout and rate limiting, and perform credential stuffing tests.
  • Session Management Testing: Analyze session token security, session fixation, and session timeout policies.
  • Multi-Factor Authentication Testing: Assess MFA implementation security and test for bypass techniques.
  • Password Reset Testing: Analyze password reset security and test for token manipulation and user parameter manipulation.

Quick Start

Run the 'broken-authentication' skill to start testing for broken authentication vulnerabilities in a web application.

Frequently Asked Questions about Broken Authentication Testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for broken authentication and session management vulnerabilities in web applications?▼

Multi-factor authentication testing assesses MFA implementation security and tests for bypass techniques. It evaluates the robustness of MFA endpoints to ensure unauthorized users cannot circumvent the secondary verification layer.

What is credential enumeration and how does brute force testing evaluate account lockout?▼

Session management testing analyzes session token security, session fixation, and timeout policies. It inspects how web applications generate, transmit, and invalidate session tokens to prevent hijacking and unauthorized session reuse.

Do I need knowledge of HTTP protocol and authentication frameworks to perform web application security testing?▼

Yes, performing web application security testing requires knowledge of the HTTP protocol, authentication types, and common authentication frameworks. This prerequisite knowledge is necessary to accurately map authentication endpoints and analyze architectures.

What is the best way to analyze password reset security and token manipulation?▼

To identify authentication vulnerabilities, you perform comprehensive tests including authentication mechanism analysis, password policy evaluation, and session management testing. This helps map authentication endpoints and uncover security gaps.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

recon-js-analysis

Extract API endpoints, routing tables, and environment configurations from client-side JavaScript bundles.

Community
Advanced
CuriousLearnerCuriousLearner
27

auth-analyzer

Analyze authentication and authorization patterns for security vulnerabilities against OWASP Top 10 and NIST.

Community
Advanced
NickCrewNickCrew
29

owasp-top-10

Identify OWASP Top 10 security vulnerabilities in web applications.

Community
Advanced
AcczdyAcczdy
2

performing-web-application-penetration-test

Automate web application penetration testing following the OWASP WSTG with Burp Suite.

Community
Advanced