Abhinav (@abiinv)

AAbhinavlog.page0.dev4d ago · 2 min read

LAB #04 Basic password reset poisoning

Lab Overview This lab is vulnerable to password reset poisoning. The user carlos will carelessly click on any links in emails that he receives. To solve the lab, log in to Carlos's account. You can lo

0

AAbhinavlog.page0.dev5d ago · 2 min read

LAB#03 OAuth account hijacking via redirect_uri

Lab Overview This lab uses an OAuth service to allow users to log in with their social media account. A misconfiguration by the OAuth provider makes it possible for an attacker to steal authorization

0

AAbhinavlog.page0.devJul 8 · 3 min read

LAB #02 Forced OAuth profile linking

Lab Overview This lab gives you the option to attach a social media profile to your account so that you can log in via OAuth instead of using the normal username and password. Due to the insecure impl

0

AAbhinavlog.page0.devJul 6 · 4 min read

LAB #01 SSRF via OpenID dynamic client registration

Lab Overview This lab allows client applications to dynamically register themselves with the OAuth service via a dedicated registration endpoint. Some client-specific data is used in an unsafe way by

0

AAbhinavlog.page0.devApr 25 · 5 min read

The HackRF Guide Nobody Asked For

What Even is a HackRF? Picture this: It’s a tiny USB device that costs less than your monthly coffee budget but can mess with radio signals from 1MHz to 6GHz. That’s basically everything from AM radio

0

Abhinav

About

Available for

Abhinav's blogs

Recently published

LAB #04 Basic password reset poisoning

LAB#03 OAuth account hijacking via redirect_uri

LAB #02 Forced OAuth profile linking

LAB #01 SSRF via OpenID dynamic client registration

The HackRF Guide Nobody Asked For

Abhinav

About

Available for

Abhinav's blogs

Recently published

LAB #04 Basic password reset poisoning

LAB#03 OAuth account hijacking via redirect_uri

LAB #02 Forced OAuth profile linking

LAB #01 SSRF via OpenID dynamic client registration

The HackRF Guide Nobody Asked For

Abhinav

About

Available for

Abhinav's blogs

Recently published

LAB #04 Basic password reset poisoning

LAB#03 OAuth account hijacking via redirect_uri

LAB #02 Forced OAuth profile linking

LAB #01 SSRF via OpenID dynamic client registration

The HackRF Guide Nobody Asked For

Search Hashnode

Abhinav

About

Available for

Abhinav's blogs

Recently published

LAB #04 Basic password reset poisoning

LAB#03 OAuth account hijacking via redirect_uri

LAB #02 Forced OAuth profile linking

LAB #01 SSRF via OpenID dynamic client registration

The HackRF Guide Nobody Asked For