OAuth State Lab: Link Your Account to the Victim's Session

ConnectApp lets you link your Twitter account through OAuth. It never sets the state parameter on the way out, and never checks it on the way back. That missing value is exactly what stops an attacker from stitching their login onto your session — and without it, they can. Lab at a glance: Intermediate · 100 XP · about 20 minutes · runs in your browser, no signup or setup. Try it yourself first; the full solution is behind a…

Read full article →