Claude MarketplacesSubmit
sickn33 avatar

Broken Authentication

sickn33/antigravity-awesome-skills

This walks you through authentication testing like you're following an OWASP checklist: password policy checks, brute forcing with Hydra and Burp, session token analysis, MFA bypass techniques, and password reset vulnerabilities. It's got practical commands and HTTP examples for each phase, from credential stuffing to session fixation tests. The API version downgrade attack for bypassing OTP rate limits is a nice touch. You'd use this during pentests or security assessments when you need structured methodology rather than scattered攻击 attempts. Assumes you already know Burp Suite and have authorization to test, because it's pretty aggressive stuff. Heavy on reconnaissance and exploitation workflows, light on remediation depth.

GitHub stars
39.4K
last updated
Jun 3, 2026
View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill broken-authentication --agent claude-code

Installs into .claude/skills of the current project.

Files

⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.

Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

  1. Ask the user to state the exact target URL, IP, account, or resource.
  2. Ask the user to confirm written authorization and the permitted scope.
  3. Show the exact command(s) and explain their expected effect.
  4. Wait for explicit confirmation in the current conversation.

Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

Broken Authentication Testing

Purpose

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/sickn33/antigravity-awesome-skills
Categories
Backend & APIs, Testing & QA, Security
First seen
Jun 3, 2026

More from sickn33/antigravity-awesome-skills

All 708

Recommended

More Backend & APIs
1syahiidkamil avatarpostgresql-optimizationsyahiidkamil/software-engineer-ai-agent-atlasPostgreSQL-specific development assistant focusing on unique PostgreSQL features, advanced data types, and PostgreSQL-exclusive capabilities. Covers JSONB opera0skills.sh installs
2Wania-Kazmi avatardatabase-patternsWania-Kazmi/claude-code-autonomous-agent-workflow|0skills.sh installs
3anthropics avatarclaude-apianthropics/skillsReference for the Claude API / Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model migration. TRIGGER —78.9Kskills.sh installs
4firebase avatarfirebase-firestore-standardfirebase/agent-skillsComprehensive guide for Firestore Standard Edition, including provisioning, security rules, and SDK usage. Use this skill when the user needs help setting up Fi37Kskills.sh installs
5google-gemini avatargemini-api-devgoogle-gemini/gemini-skillsUse this skill when building applications with Gemini API hosted models, including Gemini and Gemma 4, working with multimodal content (text, images, audio, vid26.7Kskills.sh installs
6upstash avatarupstash-redis-jsupstash/skillsWork with the Upstash Redis TypeScript/JavaScript SDK for serverless Redis operations. Use for caching, session storage, rate limiting, leaderboards, full-text 24.5Kskills.sh installs