<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Testing Authentication Flaws

## Tools

### Auth Testing

| Command | Description |
|---|---|
| `hydra -l <user> -P <list>` | Brute-force |
| `agent.js test-lockout` | Lockout |
| `agent.js test-mfa` | MFA |
| `agent.js analyze-token` | Tokens |

### Agent Script

```bash
node agent.js test-lockout --url <value> --username <value>
node agent.js test-mfa --url <value>
node agent.js test-reset --url <value>
node agent.js analyze-token --cookie <value>
```
