Tagged auth

Guard TanStack Start routes and server functions with Clerk auth

Add Clerk auth to Vue 3 with composables, router guards and Pinia

Set up email verification, password reset and hashing with Better Auth

Build lightweight Flask REST APIs with blueprints, auth and database integration

Build production Express.js servers with middleware, auth and database access

Set up multi-tenant orgs, teams, invitations and roles with Better Auth

Write reliable Playwright tests with page objects, mocks, auth and CI setup

Add TOTP, email or SMS two-factor sign-in and backup codes with Better Auth

Coerce Windows NTLM authentication with PetitPotam, PrinterBug and DFSCoerce

Test gRPC services for reflection leaks, missing auth and mTLS bypasses

Test WebSocket endpoints for cross-site hijacking and missing message auth

Hunt authentication and authorization bypasses in guards, roles and tenants

Enumerate BLE GATT services and test pairing downgrades and missing auth

Test business logic flaws like role field tampering and 2FA response bypass

Exploit web crypto flaws like padding oracles, bit-flipping and JWT alg confusion

Find Entra Conditional Access gaps and test legacy auth and break-glass misuse

Test DNP3 outstations for enumeration, control and auth downgrade exposure

Test JWT flaws like alg confusion, kid injection and weak HMAC secrets

Test LDAP injection for auth bypass, filter abuse and blind extraction

Capture and replay PCAP auth sequences to test session hijack exposure

Test NoSQL injection in MongoDB, CouchDB and Redis for auth bypass

Test OAuth and OIDC flows for redirect_uri bypass, state CSRF and PKCE downgrade

Test open redirects and tabnabbing for filter bypass and OAuth chains

Test PDF lures that route users to fake login portals in authorized phishing

Exploit PHP loose comparison and magic hash flaws to bypass authentication

Test HTTP verb tampering and method override for auth bypass

Map login endpoints and JWT, OAuth, SAML and SSO auth mechanisms

Run a four-agent pipeline that scans nginx, auth and syslog files for threats

Build the backend of an app clone with auth, migrations, Stripe payments and email

Add authentication and role-based access to a Blazor Web App by render mode

Use the GitHub CLI for auth, remotes, pushes and new repositories

Run a security checklist for auth, user input, secrets and payment features

Hunt API mass assignment, prototype pollution and HTTP verb tampering bugs

Hunt account takeover paths through password reset, OAuth linking and MFA gaps

Hunt authentication bypasses in SAML flows, login logic and access controls

Hunt GraphQL bugs like IDOR, batching DoS and mutation auth bypass

Hunt gRPC flaws like open reflection, missing auth and proto file leaks

Hunt JWT forgery through alg none and RS256 to HS256 key confusion

Hunt LDAP and XPath injection for auth bypass and attribute exfiltration

Hunt Next.js flaws in server actions, middleware auth and image optimization

Hunt NoSQL injection in MongoDB, CouchDB and Redis for auth bypass

Hunt OAuth flaws that let attackers take over accounts

Hunt open redirects and chain them into OAuth token theft

Hunt SAML and SSO attacks like signature wrapping and signature stripping

Hunt session flaws like fixation and weak logout invalidation

Hunt on-prem SharePoint farms for anonymous access and login bypass

Find hidden backend APIs in a single-page app bundle and test their access control

Audit code changes for auth, crypto and input handling flaws

View login history as CSV, JSON, a tree or an interactive list