scan-fase-11

What problem does it solve?

The skill helps security testers identify authentication and authorization bypass vulnerabilities by systematically applying header manipulations, path tricks, and protected-route testing across modern web apps.

Core Features & Use Cases

• Header-based bypass testing (11.1) using X-Original-URL, X-Rewrite-URL, and related headers to access protected routes.
• Path and extension bypass techniques (11.2) including path normalization, URL encoding, and traversal to reach restricted endpoints.
• Protected routes discovery and testing (11.3) to determine which routes are accessible without authentication and which require authorization, across admin, dashboard, API, and debug paths.
• Extended techniques and adaptive strategies for layered bypass attempts, enabling comprehensive coverage across architectures.

Quick Start

Invoke with /scan-fase-11 {url} after initial reconnaissance to begin auth bypass testing against the target application.