Test Okta identity provider security with red-team attack techniques.
npx skills add https://github.com/uphiago/recon-skills --skill okta-attack-uphiago
Please help me install this Agent Skill. Skill: okta-attack Source: https://github.com/uphiago/recon-skills/tree/main/redteam/okta-attack Command: npx skills add https://github.com/uphiago/recon-skills --skill okta-attack-uphiago
Enterprises using Okta as their identity provider have unique attack surfaces distinct from Entra ID, ADFS, and Google Workspace, requiring specialized red-team techniques to identify misconfigurations, credential vulnerabilities, MFA weaknesses, and post-compromise admin access risks.
Use the okta-attack skill to test the Okta identity provider at your-target-tenant.okta.com for misconfigurations, enumerate valid user accounts, and validate MFA factor weaknesses as part of your authorized red-team engagement.
High-intent search queries and answers about installing and using this skill.
Okta tenant discovery involves locating target tenants across okta.com, okta-emea.com, and oktapreview.com regions. This skill guides red teams to identify Okta tenants using DNS CNAME records, HTTP redirects, and TLS certificate SAN entries before launching identity provider attacks.
Okta attack surfaces are distinct from Entra ID, ADFS, and Google Workspace, requiring specialized red-team techniques. This skill targets Okta-specific vectors like OIDC redirect_uri tampering, SAML SP misconfiguration checks, and Admin API enumeration rather than generic identity provider testing.
Okta tenant discovery involves locating target tenants across okta.com, okta-emea.com, and oktapreview.com regions. This skill guides red teams to identify Okta tenants using DNS CNAME records, HTTP redirects, and TLS certificate SAN entries before launching identity provider attacks.
Testing Okta MFA factor weaknesses involves analyzing authentication flows to map available factors and validate misconfigurations. This skill enables red teams to systematically identify MFA bypass opportunities and factor weaknesses unique to Okta identity providers.
Okta attack surfaces are distinct from Entra ID, ADFS, and Google Workspace, requiring specialized red-team techniques. This skill targets Okta-specific vectors like OIDC redirect_uri tampering, SAML SP misconfiguration checks, and Admin API enumeration rather than generic identity provider testing.
Validating Okta vulnerabilities during red-team engagements includes checking disclosed CVEs and real-world incident patterns. This skill incorporates eight disclosed Okta incident writeups and provides chaining guidance for adjacent identity attack skills like m365-entra-attack and hunt-saml.
pdparchitectAudit Okta tenants for authentication, MFA, and API misconfigurations.
elementalsoulsMap Okta-as-IdP attack vectors for red-team engagements.
chatbotkitTest SAML endpoints for XSW, NameID manipulation, signature stripping, and XXE vulnerabilities.
idemeumReset Okta, Microsoft Entra, or Google Workspace passwords and clear stale local authentication state.
