Exploiting OAuth: Journey to Account Takeover

Most of the web and mobile applications these days use OAuth to secure their authorization endpoints. It allows them to easily grant access to their users to particular resources as per the application's requirements. This is a write-up of a chain of...