Solving OAuth2: Authorization Server OpenRedirect

This exercise covers the exploitation of an OpenRedirect in the Authorization Server

PTLAB

PRO

Tier

PTLAB

Medium

PTLAB

< 1 Hr.

PTLAB

870

PTLAB

Authentication / Authorization Badge

Common Mistakes:

The URL visited by the victim changes every few hours, make sure the URL in your payload targets the website the victim is currently visiting

Online access to this exercise is only available with PentesterLab PRO