skills.rest
langbyyi
langbyyiCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

oauth-oidc-misconfiguration

Detect OAuth 2.0 and OpenID Connect misconfigurations in federated authentication systems.

96|1|Updated Jun 4, 2026
Search Tags:#oauth#jwt#security testing#oidc#account takeover#authentication flaws#redirect uri bypass
One-click install
npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill oauth-oidc-misconfiguration-langbyyi
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oauth-oidc-misconfiguration
Source: https://github.com/langbyyi/CyberStrikeAI-SRC/tree/main/skills/oauth-oidc-misconfiguration
Command: npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill oauth-oidc-misconfiguration-langbyyi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

OAuth 2.0 and OpenID Connect misconfigurations are a top cause of account takeovers, CSRF attacks, and unauthorized access in applications using federated identity or social login. Manually testing all grant types, parameter validations, and account binding logic is time-consuming and often misses critical, high-severity flaws.

Core Features & Use Cases

  • Comprehensive OAuth/OIDC Coverage: Tests all standard OAuth grant types and OIDC-specific attack surfaces including id_token validation, nonce checks, and identity provider email claim trust.
  • Pre-built Attack Probes: Includes ready-to-use test cases for redirect URI bypasses, missing or replayed state/nonce parameters, PKCE downgrades, token audience confusion, and account takeover via unverified email claims.
  • Use Case: Security teams can use this skill during penetration tests or security audits of applications with "Login with X" functionality to identify authentication flaws that could lead to mass account compromise.

Quick Start

Use the oauth-oidc-misconfiguration skill to test the target application's OAuth login flow for redirect URI bypasses, missing state parameters, and account takeover risks via unverified email claims.

Frequently Asked Questions about oauth-oidc-misconfiguration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test OAuth redirect URI bypasses?▼

OAuth redirect URI bypasses are tested by validating the target application's redirect URI handling logic against path traversal, subdomain takeover, and parameter manipulation techniques to identify unauthorized code interception vulnerabilities.

What is an account takeover via unverified email claims in OIDC?▼

An OIDC account takeover via unverified email claims occurs when an application trusts identity provider email claims without verification, allowing attackers to register accounts using victim emails to hijack federated login sessions.

How do I check for missing state and nonce parameters in OAuth 2.0?▼

Checking for missing state and nonce parameters in OAuth 2.0 involves probing the authentication flow for CSRF protection gaps and replay attacks by removing or altering these parameters during the token authorization request process.

Does this OAuth testing approach cover PKCE downgrade attacks?▼

Yes, this OAuth testing approach covers PKCE downgrades by applying pre-built attack probes to verify if the authorization server properly enforces Proof Key for Code Exchange across standard OAuth grant types.

Can I use this for security audits of social login implementations?▼

Yes, you can use this for security audits of social login implementations, as it systematically validates federated authentication systems and single sign-on integrations for token audience confusion and identity provider account binding flaws.

What is token audience confusion in OAuth 2.0?▼

Token audience confusion in OAuth 2.0 is a misconfiguration where an application accepts tokens issued for a different client or resource server, enabling unauthorized cross-service access to protected user data.

Related Skills

Explore More Software Engineering Skills→
sjinkssjinks

security-review-owasp-oauth2

Review OAuth 2 implementations for security weaknesses against OWASP guidance.

Community
Advanced
cmndcntrlcybercmndcntrlcyber
3

hunt-ato

Analyze password reset flaws, MFA bypass, and session fixation for account takeover vulnerabilities.

Community
Advanced
utsavthakurutsavthakur

oauth-oidc-misconfiguration

Validate OAuth and OpenID Connect configurations for security misconfigurations.

Community
Intermediate
cmndcntrlcybercmndcntrlcyber
3

hunt-oauth

Analyze OAuth 2.0 and 2.1 flows to detect common security vulnerabilities.

Community
Advanced