Breaking Tokens: Modern Attacks on OAuth, OIDC, and JWT Auth Flows
Where
Talks
RVAsec 15
Duration
45 min
Covers modern attacks on OAuth, OIDC and JWT authentication flows and how they can be abused.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Talks·23 min
Dylan Ayrey
Shows how re-registering lapsed startup domains lets attackers reach old Google sign-in accounts at other services.
identityattackvulnerabilities+2
Talks·21 min
Falcon Darkstar Momot
Shows how Postgres roles, stored procedures and in-database JWT checks can limit what SQL injection is able to reach.
appsecvulnerabilitiesidentity+3
Talks·52 min
Nicholas Anastasi · Juan Pablo Gomez Postigo
Shows how a trusted proxy header bypassed authentication in popular self-hosted Servarr media applications.
appsecopen-sourcevulnerabilities+2