Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-authz-02
Testing for Bypassing Authorization Schema
Passed 21 of 22 test cases with the skill, and 16 of 22 without it.
and 3 more in the full report
5 fixed16 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
What is the official OWASP Web Security Testing Guide (WSTG) test alphanumeric identifier assigned to 'Testing for Bypassing Authorization Schema'?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies the test ID as WSTG-AUTHZ-02. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-AUTHZ-02
Testing for Bypassing Authorization Schema
Authorization bypass occurs when an attacker gains access to resources or functions without proper permission. This happens when the application fails to enforce access controls consistently, allowing users to access other users' data, perform privileged actions, or access restricted functionality through manipulation of requests, parameters, or application logic.
| Technique | Description |
|---|---|
| Parameter tampering | Changing user_id, role, etc. |
| Forced browsing | Direct URL access |
| HTTP method change | GET→POST, PUT→PATCH |
| Header manipulation | X-Original-URL, X-Rewrite-URL |
| Case manipulation | /Admin vs /admin |
| Path manipulation | /admin/../admin |
test cases passed, vs 16 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.