Course
This course demonstrates how to exploit an insecure OAuth2 Client vulnerable to CSRF due to the absence of the state parameter in the OAuth2 process. By leveraging this vulnerability, you can bypass authentication and gain unauthorized access to user information.
Skills covered
Authentication
Client Side
Network
CWE-352
Ready to practice?
Get access to this lab and 600+ hands-on exercises with a PRO subscription.