Login
Download
Skill UI
Browse and discover
10397+
curated skills
All
Development
Artificial Intelligence
Design & Creative
Product & Business
Data Science
Marketing
Soft Skills
Productivity
Engineering
Languages
Search
Token Replay
, found
4
results
Default
Newest
Most Downloaded
Preventing OAuth Token Theft and Replay Attacks
detecting-oauth-token-theft
mukul975/Anthropic-Cybersecurity-Skills
137
This guide details methods for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically targeting Microsoft Entra ID (Azure AD). It covers protection against access token theft, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Users can leverage Conditional Access and Token Protection features to cryptographically bind tokens to devices, significantly enhancing cloud identity security and preventing session hijacking.
View Details
Securing SalesLoft API Integrations
salesloft-security-basics
jeremylongshore/claude-code-plugins-plus-skills
320
This comprehensive guide outlines best practices for securing SalesLoft API access and integrations. It details secure token lifecycle management (OAuth refresh), implementing robust webhook signature verification using HMAC-SHA256 to prevent replay attacks, and enforcing scope minimization for least-privilege access. Use this when designing production-grade, secure enterprise integrations.
View Details
Detecting OAuth Token Theft And Replay Attacks
browser-session-hijacking
mukul975/Anthropic-Cybersecurity-Skills
415
A comprehensive guide for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically focusing on Microsoft Entra ID (Azure AD). This covers advanced threats like Primary Refresh Token (PRT) abuse, pass-the-cookie attacks, and Adversary-in-the-Middle (AitM) phishing. Use it for investigating anomalous sign-in behavior, configuring risk-based conditional access policies, and enforcing token protection to secure cloud identities.
View Details
Detect SaaS SSO Token Reuse Attacks
hunting-saas-sso-token-abuse
mukul975/Anthropic-Cybersecurity-Skills
158
A comprehensive guide for threat hunting and detection engineering focused on identifying SSO and OAuth token abuse. It detects 'pass-the-cookie' and session replay attacks where attackers use stolen tokens (like cookies or refresh tokens) to move laterally across federated SaaS platforms (Entra ID, Okta) without needing credentials. Essential for post-incident scope analysis and validating T1550.001 coverage.
View Details
1
Language
简体中文
English