Identity Auth Scanner
<p align="center" </p
---
🎯 Overview
Identity provider attack scanner for Okta MFA bypass, Entra ID token theft, OAuth device code phishing, SAML replay, and Kerberos delegation abuse.
| Check | Severity | Description | |-------|----------|-------------| | Okta MFA Bypass | 🔴 CRITICAL | Session token replay, push fatigue | | Entra ID Token Theft | 🔴 CRITICAL | PRT, refresh token extraction | | OAuth Device Code Phishing | 🟠 HIGH | User code capture | | SAML Assertion Replay | 🟠 HIGH | XML signature wrapping | | Kerberos Delegation Abuse | 🔴 CRITICAL | Constrained/unconstrained delegation | | Pass-the-Cookie/PRT | 🟠 HIGH | Session hijacking | | Golden/Silver Ticket | 🔴 CRITICAL | Kerberos ticket forgery | | MFA Fatigue/Push Bombing | 🟡 MEDIUM | Push notification spam |
---
🚀 Quick Start
git clone https://github.com/ridhinva/identity-auth-scanner.git
cd identity-auth-scanner
pip install requests msal
python3 identity_auth_scanner.py --target okta.example.com --mode all---
⚖️ Disclaimer
For authorized security testing only.