AAbhinav·Jul 8LAB #02 Forced OAuth profile linkingUnderstanding and exploiting an insecure OAuth account-linking implementation.3 min read·log.page0.dev1
VVoorivex·May 6, 2025Stealing oAuth Token via Referrer Policy OverrideExplore how referrer leakage can expose OAuth tokens in browser implementations and learn methodologies to protect against token theft4 min read·blog.voorivex.team3MOM
AAmirmohammad Safari·Feb 15, 2025CSS Data Exfiltration to Steal OAuth TokenUse CSS injection to bypass CSP, exfiltrate OAuth tokens through unique chaining techniques. Discover vulnerability and exploit details7 min read·blog.voorivex.team11RA