hunt-brute-force

To test for rate limiting vulnerabilities on a login endpoint, you can use this Skill to simulate repeated requests and analyze application responses. It identifies missing or weak throttling configurations that leave web applications exposed to brute force attacks.

OTP brute force attacks exploit weak token entropy by systematically guessing 2FA codes or password-reset tokens. This Skill quantifies token strength and simulates repeated submission attempts to detect predictable or low-entropy tokens in web applications.

You can detect username and email enumeration vulnerabilities by simulating login attempts and analyzing response variations. This Skill evaluates input manipulations and repeated requests to identify if attackers can distinguish valid from invalid accounts.

To check for ReDoS conditions, this Skill analyzes regular expressions for catastrophic backtracking vulnerabilities. It identifies patterns susceptible to denial-of-service attacks through input manipulation and regex evaluation.

Yes, you can use this for a vulnerability assessment covering brute force attacks. It evaluates login brute force, OTP/2FA brute force, username enumeration, token entropy, and ReDoS conditions by simulating repeated requests.

The best way to identify weak rate limiting measures is to simulate traffic spikes and analyze server responses. This Skill tests for missing or improperly implemented throttling by evaluating repeated request behaviors against endpoints.