Bypassing Okta SSO=> HTTPS/HTTP
Target Program: Yahoo! / Verizon Media
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
More Writeups Like This
pentester.land
by Traceable ASPENAngular-ing for AuthZ, Problematic anti-patterns in Single Sign On Systems
pentester.land
by Aidil AriefBypassing SSO Authentication from the Login Without Password Feature Lead to Account Takeover
pentester.land
by Ophion Security (@OphionSecurity)Hacking our way into internal DBs with hardcoded authentication keys
pentester.land
by 0x4KD (@0x4kd)