Identify and exploit OAuth 2.0 and OIDC vulnerabilities in web and mobile applications.
npx skills add https://github.com/pdparchitect/rook --skill hunt-oauth-pdparchitect
Please help me install this Agent Skill. Skill: hunt-oauth Source: https://github.com/pdparchitect/rook/tree/main/skills/hunt-oauth Command: npx skills add https://github.com/pdparchitect/rook --skill hunt-oauth-pdparchitect
This skill addresses the complexity of identifying and exploiting high-value OAuth vulnerabilities, such as account takeover and session theft, which are often missed during standard security audits.
Use the hunt-oauth skill to audit the OAuth implementation on the target domain and identify potential account takeover vectors.
High-intent search queries and answers about installing and using this skill.
Test OAuth account takeover vulnerabilities by mapping authorization flows, testing redirect_uri validation, and verifying state parameter binding to identify session hijacking vectors. This skill provides structured methodology and bypass payloads for auditing social login implementations.
Bypass redirect_uri whitelisting using curated payloads for host confusion, path traversal, and parameter pollution misconfigurations. This skill includes a payload library targeting common OAuth validation flaws found during bug bounty hunting.
OAuth state parameter binding prevents session theft by ensuring the authorization response is tied to the original request, blocking CSRF attacks. This skill validates state and nonce verification controls against known bug bounty patterns.
Yes, you can audit mobile deep link handlers for OAuth vulnerabilities as this skill targets token exchange flows and deep link handlers across both web and mobile applications to identify authentication bypass vectors.
Check nonce verification in OpenID Connect flows when auditing authentication bypass vectors to prevent token replay attacks. This skill validates nonce integrity alongside state parameter checks during security audits.
OAuth misconfigurations leading to session theft include weak redirect_uri validation, missing state parameters, and improper nonce verification. This skill identifies these flaws using established bug bounty patterns and bypass techniques.
yaklangMap authentication and authorization test scope for web and API targets.
cmndcntrlcyberAnalyze password reset flaws, MFA bypass, and session fixation for account takeover vulnerabilities.
bbrowningAutomate security reviews of JWT, OAuth 2.0/2.1, PKCE, and token exchange code.
marvinbissAudit Supabase RLS policies for bypass vulnerabilities and misconfigurations.
