Results for “token-theft”

7 skills

attacking-oauth-with-device-code-phishing

Execute OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID to steal access and refresh tokens, bypass MFA, and pivot across Microsoft 365 services during authorized red-team engagements.

24.6k · bundle

More results

hunting-saas-sso-token-abuse

Detect SSO and OAuth token replay and SaaS lateral movement using identity telemetry from Microsoft Entra ID and Okta.

24.6k · bundle

declared-api-skill

Reads a public API using a declared token.

implementing-api-rate-limiting-and-throttling

Protect APIs from abuse and resource exhaustion by implementing rate limiting with token bucket, sliding window, and fixed window algorithms using Redis-backed counters, API gateway plugins, or application middleware.

24.6k · bundle

Executes on-chain token trades and queries data on Solana, Ethereum, BSC, and Base via the XXYY Open API.

076-api-6bc581bf

Deploy and manage Cloudflare Workers for Platforms, including dispatch namespaces, static assets, and outbound worker configuration.

post-exploiting-microsoft-graph-with-graphrunner

Perform reconnaissance, persistence, privilege escalation, and data pillaging on Microsoft 365/Entra ID tenants via the Microsoft Graph API using the GraphRunner PowerShell toolset.

24.6k · bundle