Tagged auth

Test exposed Redis, PHP-FPM, Hadoop and similar services with no authentication

Reuse JWT, auth, expression parsing, thread pool and chain of responsibility helpers

Interpret mcpjam probe, doctor and OAuth output and triage MCP server findings

Diagnose TinyFish setup, MCP registration, auth and connectivity problems

Design and audit authentication, permissions, SSO, MFA and offboarding access

Administer email, chat and file sharing, including mail auth and guest access

Add email, OAuth, two-factor and passkey login with the Better Auth framework

Audit Google Workspace users, Drive, Gmail and OAuth apps from a local store

Harden Django apps against CSRF, XSS, SQL injection and weak auth settings

Run a security checklist on auth, user input, secrets, APIs and payment features

Secure Spring Boot APIs with Spring Security authentication, CSRF and rate limits

Manage Xiaohongshu login by QR code or phone and check login status

Automate Xiaohongshu login, publishing, search, comments and engagement

Draft prior authorization letters with clinical justification for insurers

Provision databases, auth, caching and hosting through Stripe Projects from a request

Implement OAuth 2.0 and 2.1 flows with PKCE, refresh rotation and JWT checks

Emulate Sign in with Apple and OIDC locally to test Apple sign-in

Emulate the GitHub REST API locally to test repos, PRs, OAuth and webhooks

Emulate Google OAuth, OpenID Connect, Gmail, Calendar and Drive for local tests

Embed API emulators in a Next.js app for same-origin OAuth on preview deployments

Embed API emulators in a Nuxt app for same-origin OAuth on preview deployments

Emulate the Resend email API locally to test sends, magic links and auth codes

Implement secure backend input validation, authentication and API protections

Test Jupyter, MLflow, Ray, Gradio and Ollama servers for missing authentication

Fuzz REST and GraphQL APIs with semantic payloads and test their auth

Attack ArgoCD through Redis cache poisoning, SSO bypass and rogue applications

Identify and bypass image, click and slider captchas on login and reset forms

Test FTP servers for anonymous login, traversal, weak credentials and bounce attacks

Audit Java code for auth bypass, broken access control, JWT and crypto flaws

Attack JWT tokens with alg none, weak secrets, key confusion and kid injection

Test mobile app backend APIs for auth gaps, business logic and exposed endpoints

Relay NTLM authentication with Responder and ntlmrelayx to SMB, LDAP and ADCS

Attack OAuth, SSO and OpenID Connect flows through redirect URI and state flaws

Audit PHP code for auth bypass, broken access control and weak crypto

Bypass PHP loose comparisons and magic hash checks for authentication flaws

Test WebSocket endpoints for cross-site hijacking, message injection and auth gaps

Check web apps for business logic flaws like auth bypass and payment tampering

Add API keys for NCBI, OMIM and UMLS to ToolUniverse without pasting them into chat

Avoid Ktor client traps in retries, auth, downloads and parsing that lose data

Red-team your own code, auth or APIs and report only reproducible exploit paths

Fix Event Hubs and Service Bus SDK errors like AMQP and auth failures

Provision Entra agent identities and set up OAuth token exchange for agents

Register Entra ID apps and wire up OAuth and MSAL sign-in

Build Rust web services with axum or actix, auth, middleware and rate limiting

Switch evo backends and check prerequisites, auth and install setup

Check which command-line tools are installed, their versions and login status

Run Claude Code in headless, container and CI setups, with auth and git workarounds

Act for a user in any third-party app that supports OAuth 2.0 sign-in

Set up the Feishu CLI with login, tokens, profiles, global search and OpenAPI calls