Authentication/Authorization Bypass Detection

When to Use

Audit web frameworks, API gateways, admin panels, CMS systems, and any application with role-based access control.

Process

Step 1: Map ALL Routes

# Express.js
grep -rn "app\.get\|app\.post\|app\.put\|app\.delete\|app\.patch\|router\." .

# Django
grep -rn "path(\|url(\|urlpatterns" .

# Flask
grep -rn "@app\.route\|@blueprint\.route" .