hellodqy/mastermind-bug-bounty/auth-bypass

Name: auth-bypass
Author: hellodqy

Claude Code and agent skill by hellodqy/mastermind-bug-bounty

Trust tier 2

community

LLM review pending

Source check pending

Checking that the SKILL.md file is still in the repository.

Reason about authorization barriers and whether blocked endpoints can lead to usable access.

Install

npx vskill@latest install hellodqy/mastermind-bug-bounty/auth-bypass

SKILL.md

Auth Bypass

Goal

把 401/403/405 当成权限边界线索，判断能不能换路径、方法、身份或上下文进入更高价值后端逻辑。

Tools / Inputs

Blocked endpoint queue、tokens、headers、methods、routes、gateway hints
资源索引：references/INDEX.md；候选资源：403-bypass-complete.md

Constraints

绕过必须服务于影响证明，不做无意义变体枚举。
成功后验证实际数据或动作。
优先低风险路径/方法/Header 推理，WAF 绕过最后。
保留原始阻断证据和成功差异。
不破坏真实数据。

Chain Questions

阻断来自认证、授权、路由、方法还是网关？
换身份或 token 后边界是否变化？
成功访问后能否进入导出、配置、管理、任务执行？
是否该回到 JWT/OAuth/data linkage 扩大权限？

Security

Security scanPassed, 100 of 100Pattern checks on the skill's files.
Model reviewNot runA model review is scheduled for the next rescan.

See the full security report

Quality evaluation

Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

SKILL.md in the repositoryCheckingskills/auth_bypass/SKILL.md

Popularity

7-day trend score: 5

Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

Claude Code
Cursor
GitHub Copilot
Windsurf
Codex
Gemini CLI
Cline
Amp
Roo Code
Goose
Continue
Kilo Code
Junie
Trae
OpenHands
Qwen Code
AI Agent
Tabnine Chat
Sourcegraph Cody
Amazon Q
Firebase Genkit
Sweep
Devin
Phind
Mentat
Claude Desktop
Aider
GPT Pilot
Plandex
bolt.new
v0
Replit Agent
Anse
TypingMind
BetterChatGPT
LibreChat
Warp AI
Pieces
Fig AI

Embed badge

[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/hellodqy/mastermind-bug-bounty/auth-bypass/badge)](https://verified-skill.com/skills/hellodqy/mastermind-bug-bounty/auth-bypass)

Something wrong with this skill or its page? Tell us.