skills.rest
MaiconGambini
MaiconGambiniCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

wstg-authorization

Tests web application authorization controls using the OWASP WSTG v4.2 methodology.

Updated Jul 29, 2026
Search Tags:#owasp#penetration testing#privilege escalation#idor#directory traversal#wstg#authorization testing
One-click install
npx skills add https://github.com/MaiconGambini/opencode-harness-guide --skill wstg-authorization-maicongambini
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wstg-authorization
Source: https://github.com/MaiconGambini/opencode-harness-guide/tree/main/skills/wstg-authorization
Command: npx skills add https://github.com/MaiconGambini/opencode-harness-guide --skill wstg-authorization-maicongambini

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Authorization flaws like IDOR, privilege escalation, and directory traversal let attackers access data and functions beyond their privileges, yet they are often missed because they require systematic, multi-account testing rather than automated scanning. ## Core Features & Use Cases - Structured WSTG-ATHZ Coverage: Provides step-by-step test procedures for WSTG-ATHZ-01 (directory traversal), WSTG-ATHZ-02 (authorization bypass), WSTG-ATHZ-03 (privilege escalation), and WSTG-ATHZ-04 (IDOR). - Concrete Payloads and Techniques: Includes traversal encoding variants, header override tests (X-Original-URL, X-Forwarded-For), role parameter manipulation, and horizontal/vertical bypass workflows. - Remediation Guidance: Each test section pairs findings with server-side fixes such as indirect reference maps, ownership verification, and deny-by-default access control. - Use Case: During a penetration test of a customer portal, use this Skill to systematically swap session tokens and object identifiers between two test accounts to confirm whether IDOR and horizontal privilege bypass exist. ## Quick Start Use the wstg-authorization skill to test this web application for IDOR and privilege escalation using two test accounts.

Frequently Asked Questions about wstg-authorization

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for IDOR vulnerabilities in a web application?▼

IDOR testing requires two user accounts owning different objects. Swap resource identifiers like user_id or invoice numbers between sessions and check whether User A receives User B's data. Confirm the server verifies object ownership on every request.

How to test for privilege escalation during a penetration test?▼

Privilege escalation testing manipulates role parameters, hidden form fields, cookies, and JWT claims to request higher privileges. Verify the server re-validates roles server-side rather than trusting client-supplied values like isAdmin or groupID.

What is the difference between horizontal and vertical authorization bypass?▼

Horizontal bypass lets one user access another same-role user's resources by swapping identifiers or tokens. Vertical bypass lets a low-privileged user reach admin functions, often via direct URL access or hidden endpoints lacking server-side checks.

Does directory traversal testing work on Windows servers?▼

Yes, directory traversal testing covers Windows targets using files like win.ini and boot.ini, backslash separators, UNC paths, and NT device namespace quirks. Payloads include URL encoding, double encoding, and null byte injection to bypass filters.

Why do authorization checks fail even when the UI hides admin functions?▼

Hiding UI elements only enforces authorization client-side; the underlying API endpoints still accept requests. Attackers replay admin requests captured from traffic analysis using low-privileged tokens, so every endpoint needs server-side enforcement.

When should authorization testing be performed in a security assessment?▼

Authorization testing should run after authentication testing, starting with WSTG-ATHZ-02 for broad coverage, then IDOR, directory traversal, and privilege escalation. It requires authenticated sessions and at least two accounts at different privilege levels.

Related Skills

Explore More Software Engineering Skills→
Niranjan-githubsNiranjan-githubs

attack-surface-discovery

Automate web application attack surface discovery with an 18-phase pipeline.

Community
Advanced
kaminocorpkaminocorp
1

Vulnerability Report Writing

Generate bounty-ready vulnerability reports with CVSS scoring and evidence-based severity calibration.

Official
Intermediate
YukiIto1999YukiIto1999

exploiting-sql-injection-vulnerabilities

Detect and demonstrate SQL injection vulnerabilities in web applications during authorized assessments.

Community
Advanced
xalgordxalgord
954

performing-exploit-verification

Verifies suspected vulnerabilities with reproducible exploit proof before reporting findings.

Community
Advanced