Mini-game · Chapter 3

OAuth Auditor

Five OAuth 2.0 client setups. For each, check every misconfiguration that gives an attacker a real path to stolen tokens or hijacked sessions. False positives cost points.

Educational training material. This game demonstrates an attack technique inside a sandboxed quiz UI for security learning. Do not apply these techniques against systems you do not own or have explicit written permission to test.

Setup 1 / 5 Score 0 Time 00:00