Order of Six Angles on Telegram: “This vulnerability exploits the nuances of the O…”

Order of Six Angles @orderofsixangles · 5.42K subscribers

Post #2362 928 Jun 19, 2024, 03:54 UTC

This vulnerability exploits the nuances of the OAuth protocol and iOS’s handling of Custom URL Schemes and Safari browser sessions to steal OAuth Authentication Codes from vulnerable OAuth implementations, thereby allowing an attacker to gain access to a victim’s account.

https://evanconnelly.github.io/post/ios-oauth/

Evan Connelly Mobile OAuth Attacks - iOS URL Scheme Hijacking Revamped Summary We (Julien Ahrens @MrTuxracer and myself @Evan_Connelly) identified nearly 30 popular apps, as well as a feature within iOS itself, vulnerable to an attack in which any installed iOS app from the Apple App Store could perform an account takeover of…

Open in Telegram All posts from @orderofsixangles