Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
FlowAnalyzer — FlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC). | Kitploit
Tools/GitHubGitHub/manuelberrueta/flowanalyzer
Authentication & AuthorizationAPI Security TestingWeb SecurityPenetration TestingIdentity & Access Management (IAM)Learning & EducationRed TeamingAPI Security
GitHubmanuelberrueta/flowanalyzer

FlowAnalyzer

FlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC).

View Repository
182122 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

FlowAnalyzer

Flow Analyzer

Flow Analyzer is designed for helping in low level understanding and testing of OAuth 2.0 Grants/Flows.

Although my use cases are from the security side of things, it can be beneficial from an engineer's point of view as well 😊

  • You'll find the notebooks to execute the flows under the /Flows directory and a brief explanation of each flow in /Flows/Flows.md.
    • The flows themselves are separated in their corresponding directory, in my attempt to keep things tidy!
  • If you are interested in playing around with certificate authentication, check out the /Cert_Setup directory for details on how to do it and set it up.

Setup:

To get started please see SETUP.md as for a tiny bit of setup to get everything working 😊.

[!WARNING] ⚠ The code here is not meant to be used to do any formal AuthN or AuthZ checks in Production applications. These are meant for testing ONLY! Believe me there are a lot of things that can go wrong here! Please use the Microsoft identity platform authentication libraries for production code.
You can also take a look at Libraries for Token Signing/Verification @ JWT.io

OpenID Connect (OIDC)

OAuth 2.0 was designed for authorization. OpenID Connect (OIDC) extends the OAuth 2.0 functionality to provide authentication. To find out more about OIDC, check the /OpenID_Connect-OIDC directory.

JSON Web Tokens aka JWT(s)

If we are talking about OAuth and modern authentication we can't skip talking about JWTs, as these are the type of tokens we will be working with. For further insights, please see /JWT/JWT.md.

Download Tool