The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides functional bash scripts designed to automate discovery and reconnaissance against Okta infrastructure, including subdomain enumeration and DNS record lookups.
[COMMAND_EXECUTION]: Contains scripts for active user enumeration and password spraying targeting Okta's authentication APIs (/api/v1/authn), including logic to handle and monitor account lockout policies.
[COMMAND_EXECUTION]: Provides templates and loop structures for testing OIDC redirect_uri tampering, which is a technique used to facilitate authorization code theft and open redirects.
[EXTERNAL_DOWNLOADS]: The documentation directs users to download and execute OktaTerrify, an external offensive security tool hosted on GitHub (github.com/silverhack/OktaTerrify), for post-compromise device-trust enumeration.
[CREDENTIALS_UNSAFE]: Includes technical instructions and shell commands for harvesting and using Okta administrative API tokens (SSWS) and session tokens, which grant high-level access to the target tenant.
[DATA_EXFILTRATION]: Provides the necessary API request structures to exfiltrate sensitive organizational data from Okta, including user lists, group memberships, application configurations, and audit logs once an initial foothold is established.

okta-attack