Exploiting OAuth: Journey to Account Takeover
This is a chain of four different vulnerabilities that allowed me to exploit the OAuth flow to take over the victim's account.
Written by
Security Researcher
I'm leading the Research at Credshields, and Pentest teams at Cobalt Labs and HackerOne. I occasionally blog about my findings and adventures in pentesting.
Responses
Markdown supported · ⌘↵ to post
Adhyayan Panwar
Katyi gawd like.