Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-idnt-02
Test User Registration Process
Passed 9 of 22 test cases with the skill, and 13 of 22 without it.
2 fixed12 passed either way6 still failing2 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
Which security tools are listed in OWASP WSTG-IDNT-02 guidelines for automated and manual testing of user registration security?
| Checked | Without skill | With skill |
|---|---|---|
| Lists Burp Intruder for fuzzing registration input fields. | Passed | Passed |
| Lists OWASP ZAP for automated vulnerability scanning. | Passed | Passed |
| Lists Nuclei for template-based vulnerability testing. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-IDNT-02
Test User Registration Process
The user registration process is a critical security boundary where new identities are created in the system. Testing this process identifies vulnerabilities such as weak identity verification, insufficient validation, mass registration vulnerabilities, and privilege escalation during account creation. A flawed registration process can lead to account fraud, spam, and unauthorized access.
| Vulnerability | Description |
|---|---|
| Weak verification | Easy to bypass identity checks |
| No rate limiting | Mass account creation possible |
| Parameter tampering | Role injection during registration |
| Email verification bypass | Access without confirmation |
| Information disclosure | Username enumeration |
test cases passed, vs 13 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.