hunt-ato

Identify and analyze account takeover vulnerabilities in web applications.

5|Updated May 27, 2026

Search Tags:#security testing #web security #vulnerability analysis #attack vectors #account takeover

Ready to run

npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-ato-cybersecwoman

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-ato
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/hunt-ato
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-ato-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and analyze account takeover vulnerabilities in web applications, providing a comprehensive taxonomy of attack vectors and their potential impact.

Core Features & Use Cases

Account Takeover Taxonomy: Offers a detailed classification of 9 distinct account takeover paths and their associated chains.
Path Analysis: Breaks down each path into specific techniques and scenarios, such as password reset flaws, email change without re-auth, and OAuth account-link CSRF.
Chain Primitives: Explains the underlying mechanisms of account takeover chains, such as cookie theft, password oracle, and subdomain takeover.
Validation: Provides a method for validating account takeover demonstrations on test accounts.

Quick Start

Analyze the account takeover risk for the application at 'https://target.com' using the 'hunt-ato' skill.

Frequently Asked Questions about hunt-ato

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is an account takeover vulnerability in web applications?▼

An account takeover vulnerability allows attackers to gain unauthorized access to user accounts. This Skill identifies and analyzes these web security flaws by evaluating 9 distinct attack paths, including password reset flaws, MFA bypass, and OAuth account-link CSRF.

How do I identify account takeover attack vectors during security testing?▼

You can identify account takeover attack vectors by analyzing web application authentication and recovery mechanisms. This Skill provides a comprehensive taxonomy of techniques, breaking down paths like email change without re-auth and session-fixation into specific exploitation scenarios.

Can I validate account takeover demonstrations on test accounts?▼

Yes, you can validate account takeover demonstrations on test accounts. The Skill provides a specific validation method to safely confirm exploitation chains without affecting real users, ensuring your vulnerability analysis is accurately verified.

Does this Skill detect JWT manipulation and SSO subdomain takeover paths?▼

Yes, this Skill detects JWT manipulation and SSO subdomain takeover paths. It analyzes these specific chain primitives alongside social-recovery question abuse and password change without step-up authentication to map out comprehensive account takeover risks.

What is the best way to analyze OAuth account-link CSRF vulnerabilities?▼

The best way to analyze OAuth account-link CSRF vulnerabilities is to break down the chain into underlying mechanisms. This Skill classifies the attack vector and explains how cookie theft and password oracles enable the broader account takeover chain.

When do I need to analyze password reset flaws for web security vulnerabilities?▼

You need to analyze password reset flaws when auditing web application authentication boundaries. This Skill maps these specific flaws as an initial account takeover path, connecting them to downstream chain primitives like session-fixation and MFA bypass.