OAuth2: Client CSRF

Bookmarked!

This exercise covers the exploitation of a CSRF in an OAuth2 Client

PRO Medium < 1 Hr. 1008 Authentication / Authorization Badge

Course

This course demonstrates how to exploit an insecure OAuth2 Client vulnerable to CSRF due to the absence of the state parameter in the OAuth2 process. By leveraging this vulnerability, you can bypass authentication and gain unauthorized access to user information.

Skills covered

Authentication Client Side Network

CWE-352

Included with PRO

Full course content 2 videos Common mistakes

This lab is free this month. Register to start hacking.