xomnibot@lab:~/tags/account-takeover$
// tags
#account-takeover
2 posts tagged "account-takeover".
Research
Case Study: OAuth 2.0 Redirect URI Bypass & Account Takeover
Reproducing a classic OAuth 2.0 redirect_uri validation flaw in a self-built lab: how loose prefix matching leaks authorization codes, and how to fix it.
#oauth#authentication#web-security
1 min read
Writeup
HardPortSwigger
PortSwigger OAuth 2.0 Account Takeover
Exploiting unvalidated redirect URIs and implicit grant token leaks to achieve pre-auth account takeover.
#OAuth 2.0#JWT#Account Takeover
1 min read