@mirzadzare
About
Nothing here yet.
Available for
Nothing here yet.
Mohammad Reza Mirzadzare's blogs
Recently published
From "Log in with OAuth" to "Your Account Is Mine" – Desktop App Edition
Dec 1, 2025 · 9 min read · Abstract Just one click on a malicious link → account takeover. No phishing, no malware. I discovered a security flaw in a popular desktop app’s OAuth flow that let me steal any user’s account just
VMV4L4 and 1 more commented