hunt-ato

Account takeover vectors span password reset, email change, MFA bypass, OAuth misconfigurations, and session management. This Skill identifies nine distinct attack paths and maps chain primitives that enable persistence across these vulnerable authentication and recovery workflows.

To threat model an account takeover attack chain, you analyze vulnerable authentication flows and document how attackers chain credential theft with token leakage. This Skill provides structured guidance to map these scenarios, describe risk prioritization, and execute reproducibility steps for remediation in controlled environments.

You can identify and prioritize MFA bypass and OAuth misconfiguration risks by applying a structured ATO taxonomy to your authentication settings. This Skill evaluates vulnerable recovery workflows and assigns explicit risk ratings to help security teams improve remediation timelines.

Yes, you can use this approach to document session management vulnerabilities. The Skill explicitly covers session management scenarios alongside password resets and email changes, allowing you to enumerate attack paths and assess account takeover risks across all authentication states.

The best way to enumerate account takeover paths is to map authentication flows against a structured taxonomy of nine distinct attack vectors. This Skill provides security researchers with the chain primitives needed to document credential theft, token leakage, and persistence mechanisms.

You should not rely solely on automated scanning when complex attack chains require manual threat modeling to identify persistence primitives. This Skill provides the structured risk prioritization and reproducibility steps necessary to assess chained vulnerabilities that automated tools often miss.