PortSwigger Overview

Write-ups of PortSwigger Academy Labs

OAuth Authentication

• Authenication bypass via OAuth implicit flow

• Forced Oauth Profile Linking

• OAuth account hijacking via redirect_uri

• Stealing OAuth access tokens via an open redirect

• Stealing OAuth access tokens via a proxy page