authbypass-authentication-flaws — Skills

What it does

Timestamp: token=1691234567890 (Unix time)

Sequential: token=1001, 1002, 1003

MD5(email): echo -n "user@example.com" | md5sum

MD5(username+timestamp): reversible

Short token (4-6 digits): brute-forceable

guidtool — UUID v1 reconstruction

AethliosIK/reset-tolkien — Automated token prediction for password resets

authbypass authentication flaws

Source

Repository: https://github.com/yaklang/hack-skills

authbypass-authentication-flaws FAQ

What does the authbypass-authentication-flaws skill do?

>- Authentication bypass testing playbook. Use when assessing login flows, password reset logic, account recovery, MFA bypass, token predictability, brute-force resistance, and session boundary flaws. Timestamp: token=1691234567890 (Unix time) Sequential: token=1001, 1002, 1003

What does authbypass-authentication-flaws require?

Check if reset token is based on: Timestamp: token=1691234567890 (Unix time) Sequential: token=1001, 1002, 1003 Short token (4-6 digits): brute-forceable Test: Request 3 consecutive reset emails, compare token patterns. Configuration keys: ADMIN.

How do I install authbypass-authentication-flaws?

Run: npx -y skills add https://github.com/yaklang/hack-skills --skill authbypass-authentication-flaws --agent claude-code — the source lives at github.com/yaklang/hack-skills.

Maintain authbypass-authentication-flaws?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[authbypass-authentication-flaws on getagentictools](https://getagentictools.com/skills/yaklang-hack-skills-authbypass-authentication-flaws?ref=badge)

npx agentictools info skills/yaklang-hack-skills-authbypass-authentication-flaws

The second line is the CLI lookup for this page — handy in READMEs and docs.