SSRF via OpenID dynamic client registration
Laboratorio de Portswigger sobre OAuth
Justice-Reaper
Authentication bypass via OAuth implicit flow
Laboratorio de Portswigger sobre OAuth
CORS vulnerability with trusted insecure protocols
Laboratorio de Portswigger sobre CORS
CORS vulnerability with trusted null origin
Laboratorio de Portswigger sobre CORS
CORS vulnerability with basic origin reflection
Laboratorio de Portswigger sobre CORS
Multistep clickjacking
Laboratorio de Portswigger sobre Clickjacking
Exploiting clickjacking vulnerability to trigger DOM based XSS
Laboratorio de Portswigger sobre Clickjacking
Clickjacking with a frame buster script
Laboratorio de Portswigger sobre Clickjacking
Clickjacking with form input data prefilled from a URL parameter
Laboratorio de Portswigger sobre Clickjacking
Basic clickjacking with CSRF token protection
Laboratorio de Portswigger sobre Clickjacking