hunt-ato

What problem does it solve?

This Skill helps you identify, test, and prioritize account takeover (ATO) attack paths by organizing common ATO primitives into actionable hunt and validation steps.

Core Features & Use Cases

• ATO taxonomy for hunting: Covers nine distinct ATO paths, including reset/account-email flaws, OAuth linking and redirect issues, MFA/session problems, token manipulation, and SSO subdomain takeover scenarios.
• Chain primitive framing: Breaks common ATO “chains” into reusable building blocks (e.g., cookie theft + password oracle + missing step-up, OAuth redirect_uri takeover for code theft).
• Critical validation guidance: Emphasizes reproducing a real takeover against a test victim session/account to separate Critical-paid findings from lower-tier cases.

Quick Start

Run the hunt workflow for account takeover taxonomy and validate an ATO chain by demonstrating account takeover on test account B using attacker A’s session.