bypassing-authentication-with-forced-browsing
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/agent.py
LOWAnomalyLOW
scripts/agent.py
The code is a readable dual-use web security scanner intended to identify forced-browsing, authentication-bypass candidates, HTTP method weaknesses, traversal variants, and exposed sensitive files. It contains no clear malware or supply-chain backdoor indicators. Its primary risks are active probing of arbitrary targets, sending a provided session cookie broadly within the target URL scope, unsafe verify=False settings, and possible destructive effects from testing state-changing HTTP methods. The supplied code is also syntactically incomplete at the final main( call.
Confidence: 99%Severity: 55%
Audit Metadata