Access Control: Authentication Bypass¶

Identifier: authentication_bypass

Scanner(s) Support¶

Description¶

Authentication bypass vulnerabilities occur when an application treats a request as authenticated without correctly verifying the user's identity.

How we test: We manipulate authentication state, tokens, headers, cookies, and protected requests to detect cases where the application grants authenticated access without valid credentials.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  authentication_bypass:
    skip: false

Reference¶

skip¶

Type : boolean

Skip the test if true.