auth-bypass
Hunt authentication/authorization bypass in route guards, role checks, tenant boundaries, and state-machine transitions.
Best for Security testingWorks with GitHub
⌘source
- author
@PurpleAILAB- language
- Python
★2.1kstars
366forks
Apr 18, 2026
✦overview.md
Key Features
- ·Hunts authentication bypass in route guards
- ·Identifies authorization flaws in role checks
- ·Tests tenant boundary security
- ·Validates state-machine transition security
Use Cases
- →Security teams conducting penetration tests on web applications
- →Developers testing role-based access controls before deployment
- →Auditors verifying tenant isolation in multi-tenant systems
- →QA engineers validating multi-step authentication flows
Best for
- ✓Security testing
- ✓Penetration testing
- ✓Access control validation
Not ideal for
- !Production environments
- !Automated CI/CD pipelines without supervision
FAQs
name
auth-bypass
description
Hunt authentication/authorization bypass in route guards, role checks, tenant boundaries, and state-machine transitions.
Auth Bypass Playbook
Targets
- Endpoints with role-based access
- Admin-only routes
- Tenant-scoped resources
- Multi-step auth flows (MFA, password reset)
Common failure patterns
- Missing middleware on one route variant
- Trusting client-controlled role/tenant fields
- TOCTOU between check and action
- Alternate API versions lacking guard checks
Validation
- Positive: low-priv session performs high-priv action.
- Negative: same request with expected guard path should deny.
$install
1-click copynpx skills add PurpleAILAB/Decepticon --skill auth-bypassSafety assessment
★
Clarity score
How clear and easy to understand the SKILL.md instructions are, rated from 1 to 5.
4/ 5
very goodClear and well structured, with only minor parts that might need a second read.
◎
Actionability score
How directly an agent can act on the SKILL.md instructions, rated from 1 to 5.
3/ 5
mediumPartially actionable with several concrete steps, but still missing important details.