Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

OAuth Vulnerabilities

Learn how the OAuth protocol works and master techniques to exploit it.

Task 1: Introduction

Task 2: Key Concepts

Task 3: OAuth Grant Types

Task 4: How OAuth Flow Works

Task 5: Identifying the OAuth Services

Task 6: Exploiting OAuth - Stealing OAuth Token

Task 7: Exploiting OAuth - CSRF in OAuth

Task 8: Exploiting OAuth - Implicit Grant Flow

Task 9: Other Vulnerabilities and Evolution of OAuth 2.1

Task 10: Conclusion

Back to all walkthroughs
Room Icon

OAuth Vulnerabilities

Premium room

Learn how the OAuth protocol works and master techniques to exploit it.

medium

120 min

20,673

User profile photo.
User profile photo.

To access material, start machines and answer questions login.

In modern web applications, OAuth vulnerabilities emerge as a serious and frequently disregarded risk; when we talk about OAuth, we're talking about OAuth 2.0, the commonly used authorisation framework. The vulnerabilities occur when hackers take advantage of weaknesses in OAuth 2.0, which allows for , , data leakage and exploitation of other vulnerabilities.

 

Learning Objectives

Throughout this room, you will gain a comprehensive understanding of the following key concepts:
  • Essential concepts for OAuth 2.0 (Grant Types)
  • OAuth 2.0 flow
  • Identify OAuth services
  • Exploitation techniques
  • Evolution of OAuth 2.1

An understanding of the following topics is recommended before starting the room:

Let's begin! 

Answer the questions below

I am ready to start the room.