davila7 avatar

Broken Authentication Testing

This is a security testing template that walks you through finding authentication vulnerabilities in web apps. It covers the standard attack surface: weak passwords, broken session handling, MFA bypass attempts, and credential stuffing. You'll need Burp Suite and a brute force tool like Hydra. The skill comes from a larger template collection with nearly 28K GitHub stars, so it's part of a well-maintained set. Honestly, this is most useful if you're doing penetration testing or security audits and want Claude to help structure your authentication attack workflow. It won't replace actual security expertise, but it can help you remember the checklist of things to test when hunting for OWASP Top 10 issues.

GitHub stars
30.2K
last updated
Aug 21, 2026

Install

$ npx -y skills add davila7/claude-code-templates --skill 'Broken Authentication Testing' --agent claude-code

Installs into .claude/skills of the current project.

Files

This is a security testing template that walks you through finding authentication vulnerabilities in web apps. It covers the standard attack surface: weak passwords, broken session handling, MFA bypass attempts, and credential stuffing. You'll need Burp Suite and a brute force tool like Hydra. The skill comes from a larger template collection with nearly 28K GitHub stars, so it's part of a well-maintained set. Honestly, this is most useful if you're doing penetration testing or security audits and want Claude to help structure your authentication attack workflow. It won't replace actual security expertise, but it can help you remember the checklist of things to test when hunting for OWASP Top 10 issues.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/davila7/claude-code-templates
Categories
Backend & APIs, Testing & QA, Security
First seen
Jun 3, 2026

More from davila7/claude-code-templates

All 618
1ghostsecurity avatarghost-proxyghostsecurity/skillsStarts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traffic between clients and servers. Capabilities include starting/0skills.sh installs
2kaelio avatarlive_database_ingestkaelio/ktxCapture semantic-layer and knowledge updates from a live database schema snapshot.0skills.sh installs
3martinholovsky avatarDatabase Design Expertmartinholovsky/claude-skills-generatorExpert in database schema design with focus on normalization, indexing strategies, FTS optimization, and performance-oriented architecture for desktop applicati0skills.sh installs
4ruvnet avatarworker-benchmarksruvnet/claude-flowRun comprehensive worker system benchmarks and performance analysis0skills.sh installs
5ruvnet avatarworker-integrationruvnet/claude-flowWorker-Agent integration for intelligent task dispatch and performance tracking0skills.sh installs
6syahiidkamil avatarpostgresql-code-reviewsyahiidkamil/software-engineer-ai-agent-atlasPostgreSQL-specific code review assistant focusing on PostgreSQL best practices, anti-patterns, and unique quality standards. Covers JSONB operations, array usa0skills.sh installs