Auth Bypass

Hunt authentication/authorization bypass in route guards, role checks, tenant boundaries, and state-machine transitions.

purpleailab 49be412 655 B Updated

File contents

Auth Bypass Playbook

Targets

  • Endpoints with role-based access
  • Admin-only routes
  • Tenant-scoped resources
  • Multi-step auth flows (MFA, password reset)

Common failure patterns

  • Missing middleware on one route variant
  • Trusting client-controlled role/tenant fields
  • TOCTOU between check and action
  • Alternate API versions lacking guard checks

Validation

  • Positive: low-priv session performs high-priv action.
  • Negative: same request with expected guard path should deny.

purpleailab/decepticon/tree/main/packages/decepticon/decepticon/skills/standard/analyst/auth-bypass commit 49be412bbb

Frequently asked questions

npx skillmds@latest add purpleailab/auth-bypass