transilienceai/communitytools/authentication

Claude Code and agent skill by transilienceai/communitytools

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA bypass, CAPTCHA bypass, and bot detection evasion.

Install

npx vskill@latest install transilienceai/communitytools/authentication

SKILL.md

Authentication

Test authentication mechanisms including login security, token handling, 2FA, CAPTCHA, and bot detection.

Techniques

TypeKey Vectors
Auth BypassDefault credentials, logic flaws, response manipulation
ADFS/SAMLGolden SAML, token signing cert theft, assertion manipulation, SAML wrapping
JWTAlgorithm confusion, key injection, claim tampering, token forging
OAuthRedirect manipulation, CSRF, token leakage, scope abuse
PasswordBrute force, credential stuffing, password policy bypass
2FA BypassResponse manipulation, direct endpoint access, code reuse, race conditions
CAPTCHA BypassMissing server validation, token reuse, OCR, parameter manipulation
Bot DetectionBehavioral biometrics simulation, fingerprint randomization, stealth mode

Tools

PasswordGenerator (tools/password_generator.py):

python
from tools.password_generator import generate_password
password = generate_password(hint_text="8-16 chars, uppercase, numbers")

CredentialManager (tools/credential_manager.py):

python
from tools.credential_manager import CredentialManager
mgr = CredentialManager()
mgr.store_credential(target="example.com", username="test", password="pass")

Workflow

  1. Analyze auth implementation (forms, tokens, 2FA, CAPTCHA)
  2. Test bypass vectors per technique type
  3. Use Playwright MCP with human-like behavior (typing 80-200ms, random pauses)
  4. Capture evidence (screenshots, network logs, tokens)
  5. Document findings with PoC scripts

Reference

  • reference/authentication*.md - Auth bypass techniques, payloads, and resources
  • reference/jwt*.md - JWT attack techniques and cheat sheets
  • reference/oauth*.md - OAuth vulnerability testing
  • reference/scenarios/password-attacks/*.md - Password attack vectors (spray, stuffing, cracking, PtH)
  • reference/adfs-exploitation.md - ADFS, Golden SAML, federation attacks
  • reference/scenarios/2fa/*.md - 2FA bypass methods
  • reference/CAPTCHA_BYPASS.md - 11 CAPTCHA bypass techniques
  • reference/BOT_DETECTION.md - Bot detection evasion strategies
  • reference/PASSWORD_CREDENTIAL_MANAGEMENT.md - Tool usage guide

Security

  • Security scanPassed, 90 of 100Pattern checks on the skill's files.
  • Model reviewPassed

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

Repository stars
333
Repository forks
64
7-day trend score
29

Stars and forks are for the whole GitHub repository, not this skill alone. Refreshed 22 May 2026, 5 months ago.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/transilienceai/communitytools/authentication/badge)](https://verified-skill.com/skills/transilienceai/communitytools/authentication)

Something wrong with this skill or its page? Tell us.