PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How we broke exchanges: a deep dive into authentication and client-side bugs

osec.io | research | #web3 | #account-takeover | #authentication | #vulnerability | #oauth | #exchanges
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

OtterSec details OAuth misconfigurations that lead to account takeover in exchanges, SDKs and wallets, including Google GSI/FedCM flow quirks and desktop-vs-mobile environment gaps.
Published
Collected

Related coverage

research · slcyber.io
Taking over Azure DevOps Accounts with 1 Click
1-click Azure DevOps account takeover via subdomain takeover chained with OAuth redirect token theft.
blog · yeswehack.com
‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips
French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
blog · certik.com
Clear Signing Under the Hood: A Technical Guide to ERC-7730
What the ERC-7730 standard does, how it works under the hood, and the security trade-offs that come with it.
blog · borghq.io
From Pentests to Continuous Security with Pixels
How Pixels moved from scheduled pentests to continuous security with Borg, covering its live game, authentication, APIs, on-chain rewards, and open-source releases.
research · portswigger.net
Detecting web message misconfigurations for cross-domain credential theft
DOM Invader gains cross-domain leak detection: it inspects web messages and flags secrets from the URL being sent to other origins, automating the hunt for OAuth credential-theft misconfigurations.
research · portswigger.net
Hidden OAuth attack vectors
Three new OAuth2/OpenID Connect vectors — Dynamic Client Registration SSRF by design, redirect_uri session poisoning, WebFinger user enumeration — shown on ForgeRock OpenAM and MITREid Connect.
Back