Back to Playbooks
Vulnerability
vuln-oauth
OAuth 2.0 and OpenID Connect misconfiguration testing. Open redirect ATO, state CSRF bypass, authorization code leakage and reuse, token audience confusion, PKCE bypass, scope escalation, implicit flow abuse.
Slug
vuln-oauth
Category
Vulnerability
Run Playbook
/gitest vuln-oauth