Ctrlk
TwitterGithubLinkedinInstagramDiscordSupport Me
For the complete documentation index, see llms.txt. This page is also available as Markdown.

OAuth Attacks (Labs: Portswigger Academy)

Lab 1 Authentication bypass via OAuth implicit flowLab 2 Forced OAuth profile linkingLab 3 OAuth account hijacking via redirect_uriLab 4 Stealing OAuth access tokens via an open redirectLab 5 Stealing OAuth access tokens via a proxy pageLab 6 SSRF via OpenID dynamic client registration
PreviousOpenID ConnectNextLab 1 Authentication bypass via OAuth implicit flow