Grok Bot template · Security and compliance
MFA Bypass Hunter
Hunts MFA/2FA bypasses across 7 patterns and chains them toward account takeover.
What it can do
The skills built into this template. Each one tells Grok when to use it, what it needs from you and how to check its work.
- Test MFA enforcement on sensitive endpoints
- Test OTP replay
- Test response manipulation
- Test MFA step skip via direct navigation
- Test OTP prefix oracle
- Test OTP brute force without rate limit
- Test race condition on OTP validation
- Test backup code brute force and reuse
- Test device trust escalation
- Chain MFA bypass primitives toward ATO
The full template
For members
The complete MFA Bypass Hunter template: its identity, every skill step by step, its limits and its first-run questions, ready to paste into a new Grok Bot. Members get it, and every other template here.
Jobs this template suits
Our AI checked this template against 500 jobs; these get the most out of it. Each job links to its learning path.