Tests APIs for Broken Function Level Authorization (OWASP API5:2023) by identifying admin and privileged endpoints, then reaching them with regular-user credentials via HTTP method switching, URL path manipulation, and parameter tampering. Use when testing whether low-privilege users can invoke admin API functions or otherwise escalate privileges via function-level access control gaps.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-broken-function-level-authorizationnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-broken-function-level-authorization -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-broken-function-level-authorization -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/exploiting-broken-function-level-authorizationgh skill install mukul975/Anthropic-Cybersecurity-Skills exploiting-broken-function-level-authorizationgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-broken-function-level-authorization ~/.claude/skills/exploiting-broken-function-level-authorization # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-broken-function-level-authorization ~/.agents/skills/exploiting-broken-function-level-authorization # Codex, Cursor, Gemini CLI, Copilot, OpenCode