Skip to main content

hunt-mfa-bypass

Identifies vulnerabilities in MFA/2FA implementations through various bypass techniques, enhancing security assessments.

Install this skill

or
92/100

Security score

The hunt-mfa-bypass skill was audited on May 29, 2026 and we found 4 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 41

Curl to non-GitHub URL

SourceSKILL.md
41curl -s -b "session=PRE_MFA_SESSION" https://target.com/dashboard
low line 12

External URL reference

SourceSKILL.md
12ffuf -u "https://target.com/api/verify-otp" \
low line 41

External URL reference

SourceSKILL.md
41curl -s -b "session=PRE_MFA_SESSION" https://target.com/dashboard
low line 49

External URL reference

SourceSKILL.md
49async with session.post("https://target.com/api/mfa/verify",
Scanned on May 29, 2026
View Security Dashboard
Installation guide →