hunt-mfa-bypass
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill provides educational content focused on identifying and mitigating MFA bypass vulnerabilities. All provided commands and scripts are templates designed for security testing and use placeholders for sensitive information like session tokens and target domains.\n- [COMMAND_EXECUTION]: The documentation includes examples of using standard security tools such as
curlandffuffor auditing authentication workflows. These commands are presented as testing procedures for identified patterns.\n- [DYNAMIC_EXECUTION]: A Python script is provided to illustrate a race condition attack on MFA verification. The script uses standard libraries likeasyncioandaiohttpto perform concurrent requests against a placeholder endpoint for demonstration purposes.
Audit Metadata