unauthorized-access - Unauthorized Access Detection
Detect risks of unauthorized access to sensitive endpoints without authentication
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- filter protected endpoints
- send baseline requests
- remove authentication
- replay requests
- empty auth headers
- detect fail-open flaws
- check path variants
- verify method variants
- record responses
- compare access results
- list files
- search files
- execute commands
Inputs
- endpoint ledger
- authentication credentials
- target system URL
- codebase files
- API endpoints
Outputs
- detection report
- vulnerability evidence
- request responses
- confirmed findings
Requirements
- authorized testing environment
- bash tool
- read_file tool
- list_files tool
- rg tool