Day: October 29, 2024
-
OAuth-Based CSRF: Exploiting The Flaw In Implementation Of State Parameter
OAuth-Based CSRF: Exploiting The Flaw In Implementation Of State Parameter Share this article: Facebook Github Linkedin Pinterest X-twitter Whatsapp Envelope Hey there! A few days ago, while doing penetration testing on one of the assets of our client, our team came through a scenario that is worth sharing. It was an OAuth based CSRF that…