LAB #04 Basic password reset poisoningLab Overview This lab is vulnerable to password reset poisoning. The user carlos will carelessly click on any links in emails that he receives. To solve the lab, log in to Carlos's account. You can loJul 15 · 2 min readlog.page0.dev
LAB#03 OAuth account hijacking via redirect_uriLab Overview This lab uses an OAuth service to allow users to log in with their social media account. A misconfiguration by the OAuth provider makes it possible for an attacker to steal authorization Jul 14 · 2 min readlog.page0.dev
LAB #02 Forced OAuth profile linkingLab Overview This lab gives you the option to attach a social media profile to your account so that you can log in via OAuth instead of using the normal username and password. Due to the insecure impl1Jul 8 · 3 min readlog.page0.dev
LAB #01 SSRF via OpenID dynamic client registrationLab Overview This lab allows client applications to dynamically register themselves with the OAuth service via a dedicated registration endpoint. Some client-specific data is used in an unsafe way by 1Jul 6 · 4 min readlog.page0.dev
The HackRF Guide Nobody Asked ForWhat Even is a HackRF? Picture this: It’s a tiny USB device that costs less than your monthly coffee budget but can mess with radio signals from 1MHz to 6GHz. That’s basically everything from AM radioApr 25 · 5 min readlog.page0.dev