SSnO-nos: Finding and exploiting common OAuth pitfalls

No ratings

Presented at BSidesKnoxville 2018 by

Matthew Gundy

With OAuth, you can use a single identity with multiple web apps and securely delegate access to your data. But, if app developers weren't careful, it might let an attacker access your data too. Learn the basics of OAuth 2.0, how to find and exploit common vulnerabilities, and how to avoid them.