Stealing OAuth access tokens via an open redirect
Laboratorio de Portswigger sobre OAuth
Justice-Reaper
OAuth account hijacking via redirect_uri
Laboratorio de Portswigger sobre OAuth
Forced OAuth profile linking
Laboratorio de Portswigger sobre OAuth
SSRF via OpenID dynamic client registration
Laboratorio de Portswigger sobre OAuth
Authentication bypass via OAuth implicit flow
Laboratorio de Portswigger sobre OAuth
CORS vulnerability with trusted insecure protocols
Laboratorio de Portswigger sobre CORS
CORS vulnerability with trusted null origin
Laboratorio de Portswigger sobre CORS
CORS vulnerability with basic origin reflection
Laboratorio de Portswigger sobre CORS
Multistep clickjacking
Laboratorio de Portswigger sobre Clickjacking
Exploiting clickjacking vulnerability to trigger DOM based XSS
Laboratorio de Portswigger sobre Clickjacking