BlueHat Asia: When servers get phished: OAuth token misbinding and server-side CSRF in social logins
Security researchers examine technical aspects of BlueHat Asia: When servers get phished: OAuth token misbinding and server-side CSRF in social logins.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Main Stage·45 min
Daizibukaikou
Daizibukaikou details login cross-site request forgery and account-takeover vectors where attackers induce victims to authenticate into malicious sessions.
authenticationoauthsso+2
Videos·35 min
Industry experts analyze emerging threats surrounding Vulnerabilities of mobile OAuth 2.0 by Nikita Stupin, Mail.ru.
mobilevulnerabilitiesoauth
Briefings·30 min
Vaisha Bernard
Security researchers expose authorization flaws in Microsoft Entra OAuth implementations, gaining lateral access across internal enterprise services.
windowsauthenticationoauth+3