• views: 138
• date: 19 November 2023
• posted by: voska89

learn about oauth ,its misconfigurations and understand oauth attack in real world scenerios
What you'll learn
What is oauth?
Types of oauth?
Oauth Misconfigurations with proper explanations
Learning different attacks possible in oauth
Learn chaining oauth with other vulnerabilities like CSRF,HTML injection
Business logic misconfigurations with oauth
Special case of bypassing CORS policy and finally making it to account takeover
Requirements
Good to know basics of burpsuite,postman,some basics of development like HTML,JS
If you haven't explored any of those mentioned above then no issue you can first learn basics of them then you are ready for the demonstrations
Description
oauth is one the most important topic nowadays if you study web applications penetration testing or api security testing or android security testing then the oauth is one of the most common topic,it is popularly used in almost every applications ,vulnerabilities like account takeover are found in oauth misconfigurations, if you don't know how to go for oauth testing then this course is for you,you will be able to learn different types of attacks possible with oauth with respective misconfiguration and will learn how chaining can be done in oauth with other vulnerabilities,I have demonstrated the oauth misconfiguration using portswigger labs and also discussed the live finding from a bug bounty programme,you can also find similar issues on your programme as wellThis is a short course , in this course, you will be going to learn =>What is Oauth?Types of Oauth?How does Oauth work?What are oauth misconfigurations?Demonstrations of account takeovers on lab and live casesAnalysing oauth flow from developers docs using PostmanAnalysing how to bypass some of the restrictions and chaining oauth with other vulnerabilitiesUnderstanding more business logic misconfiguration collected from various reports and articles.Use the tutorials for education purpose only don't misuse it in real worldThanks
Who this course is for
Ethical Hackers
Bug Bounty Hunters
Security Engineers
Red Teamers
Developers
IT analysts
Security Enthusiasts
Homepage

https://www.udemy.com/course/unveiling-oauth-for-bug-bounty-hunting/

   
   
   

Forex Trading

Crypto Trading. 20 USD Bonus after KYC

We need your support!
Make a donation to help us stay online
        
Bitcoin (BTC)
bc1q08g9d22cxkawsjlf8etuek2pc9n2a3hs4cdrld
	
Bitcoin Cash (BCH)
qqvwexzhvgauxq2apgc4j0ewvcak6hh6lsnzmvtkem

Ethereum (ETH)
0xb55513D2c91A6e3c497621644ec99e206CDaf239

Litecoin (LTC)
ltc1qt6g2trfv9tjs4qj68sqc4uf0ukvc9jpnsyt59u

USDT (ERC20)
0xb55513D2c91A6e3c497621644ec99e206CDaf239

USDT (TRC20)
TYdPNrz7v1P9riWBWZ317oBgJueheGjATm

0 1 2 3 4 5

| Print version |

	Information
		Users of GUESTS are not allowed to comment this publication.