Keycloak Pentest CheatSheet

Keycloak Pentest CheatSheet is a manual testing reference for identifying a Keycloak version, finding realms and client IDs, reviewing OIDC configuration, and selecting checks that match the available access level. It collects requests for SSRF, open redirects, XSS, session hijacking, and broken access control, along with routes for the Account API, Admin Console, and client registration.

Tool: https://github.com/1arroiz/Pentest-CheatSheet-Popular-Services/blob/main/Web%20Services/Keycloak.md