oauth-attacks

OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter abuse, open redirector chaining, token leakage via Referer, PKCE bypass, and scope escalation. Use when testing OAuth implementations in web apps or bug bounty. Trigger phrases: OAuth, OAuth 2.0, authorization code, redirect_uri bypass, OAut…

Independent GitHub snapshot · Automated classification · Original documentation governs