Authentication Bypass

Authentication bypass vulnerabilities allow attackers to access protected resources without providing valid credentials, by exploiting flaws in authentication logic, session handling, or cryptographic verification. Common techniques include manipulating JWT signatures (setting algorithm to `none`), exploiting SQL injection in login forms, or abusing flawed password reset flows.

Authentication bypass typically leads directly to account takeover and data exposure.