---
title: "Discussion on \"Exploiting OAuth: Journey to Account Takeover\" | Hashnode"
description: "Discussion on \"Exploiting OAuth: Journey to Account Takeover\". This is a chain of four different vulnerabilities that allowed me to exploit the OAuth flow to take over the victim's account."
url: "https://hashnode.com/posts/oauth-account-takeover/61fba45b98d3a620773e67b3"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Exploiting OAuth: Journey to Account Takeover](https://blog.dixitaditya.com/oauth-account-takeover?utm_source=hashnode&utm_medium=feed)

This is a chain of four different vulnerabilities that allowed me to exploit the OAuth flow to take over the victim's account.

Nov 19, 2021 · 5 min read · blog.dixitaditya.com  
Read the article

-   [#oauth](https://hashnode.com/tag/oauth)
-   [#security](https://hashnode.com/tag/security)
-   [#tutorial](https://hashnode.com/tag/tutorial)
-   [#hacking](https://hashnode.com/tag/hacking)
-   [#web-development](https://hashnode.com/tag/web-development)

## Written by

[Aditya Dixit](https://hashnode.com/@adityadixit)

@adityadixit · India

  
[View profile](https://hashnode.com/@adityadixit)

Security Researcher

I'm leading the Research at Credshields, and Pentest teams at Cobalt Labs and HackerOne. I occasionally blog about my findings and adventures in pentesting.

## Responses 1

Markdown supported · ⌘↵ to post

[Adhyayan Panwar](https://hashnode.com/@nullvoiddeath)

[Feb 3, 2022](https://hashnode.com/posts/oauth-account-takeover/61fba45b98d3a620773e67b3/comment/61fba74098d3a620773e682a)

Katyi gawd like.

[Aditya Dixit](https://hashnode.com/@adityadixit)

[Feb 3, 2022](https://hashnode.com/posts/oauth-account-takeover/61fba45b98d3a620773e67b3/comment/61fba74098d3a620773e682a#reply-61fc0f02fd8b083e572891b8)

nice.