OAUTH Authentication bypass via OAuth implicit flow - Portswigger Labs
This lab uses an OAuth service to allow users to log in with their social media account. Flawed validation by the client application makes it possible for an attacker to log in to other users' accounts without knowing their password.
Hope you guys enjoyed the episode. For any questions feel free to ask them in comment section or on our social network.
------------------------------------------------------------------------------------------------------------
Social Networks:
Facebook- / hackerassociate
LinkedIn- / hack. .
Twitter- / hackerasociate
------------------------------------------------------------------------------------------------------------
Thank you for watching. Stay connected.
#OAuth #bugbounty #Portswigger