IntermediateFREE12 hours
What Is OAUTH?
// VULNERABLE: Direct use without allow-list
Enroll for free to track your progress through this course.
Curriculum (23 lessons)
- 1. What Is OAUTH?
- 2. How Does OAUTH 2.0 Work?
- 3. How Do OAUTH Authentication Vulnerabilities Arise?
- 4. Identifying OAUTH Authentication
- 5. Recon
- 6. Exploiting OAUTH Authentication Vulnerabilities
- 7. Extending OAUTH with OpenID Connect
- 8. Preventing OAUTH Authentication Vulnerabilities
- 9. OAUTH Grant Types
- 10. What Is an OAUTH Grant Type?
- 11. OAUTH Scopes
- 12. Authorization Code Grant Type
- 13. Implicit Grant Type
- 14. OpenID Connect
- 15. What Is OpenID
- 16. How Does OpenID
- 17. Identifying OpenID Connect If
- 18. OpenID
- 19. How to Prevent OAUTH Authentication Vulnerabilities
- 20. for OAUTH Service Providers
- 21. for OAUTH Client Applications
- 22. Best Practices & Detailed Takeaways
- 23. Exploit Open Redirect: Craft OAUTH URL with Attacker Redirect