OAuth2: Client CSRF

Bookmarked!

This exercise covers the exploitation of a CSRF in an OAuth2 Client

PRO Medium < 1 Hr. 968 Authentication / Authorization Badge
Course

This course demonstrates how to exploit an insecure OAuth2 Client vulnerable to CSRF due to the absence of the state parameter in the OAuth2 process. By leveraging this vulnerability, you can bypass authentication and gain unauthorized access to user information.

Skills covered
Authentication Client Side Network
CWE-352
Included with PRO
Full course content 2 videos Common mistakes

Ready to practice?

Get access to this lab and 600+ hands-on exercises with a PRO subscription.