Identify OAuth vulnerabilities in web applications via HTTP responses and JavaScript.
npx skills add https://github.com/Skobyn/talon --skill hunt-oauth-skobyn
Please help me install this Agent Skill. Skill: hunt-oauth Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-oauth Command: npx skills add https://github.com/Skobyn/talon --skill hunt-oauth-skobyn
This Skill unit assists in discovering OAuth vulnerabilities, providing a systematic approach to hunting for and mitigating risks associated with OAuth implementations.
Utilize the hunt-oauth skill to start hunting for OAuth vulnerabilities by running the 'enumerate-oauth-entry-points' command.
High-intent search queries and answers about installing and using this skill.
Common OAuth vulnerabilities include weak redirect_uri validation bypass, state parameter issues, and token theft. Identifying these flaws requires analyzing HTTP responses, JavaScript code, and server configurations during a security audit.
To find OAuth entry points, start by running the enumerate-oauth-entry-points command. This maps the OAuth flow systematically, allowing you to test various parameters and hunt for vulnerabilities like redirect_uri bypass and state parameter issues.
Weak redirect_uri validation allows attackers to manipulate the callback endpoint, intercepting authorization codes or access tokens. This OAuth token theft occurs when server configurations fail to strictly whitelist approved redirect URIs.
The best way to audit OAuth state parameter implementations is to check if the parameter is missing, predictable, or improperly validated. This vulnerability hunting step prevents cross-site request forgery attacks during the OAuth flow.
Yes, this vulnerability hunting methodology applies to custom OAuth server configurations. It provides a step-by-step approach to analyzing HTTP responses and JavaScript code to uncover implementation flaws.
OAuth flows may fail during redirect_uri bypass testing if the server configuration strictly validates URIs or blocks mismatched requests. Limitations arise when robust server-side whitelisting prevents token theft and redirect manipulation.
SkobynDetect and exploit SSRF vulnerabilities in web applications.
wgpsecTest OAuth 2.0 and OpenID Connect flows for redirect_uri, state, and token weaknesses.
ricardoo022Identify configurations, secrets, and attack-surface exposure from JS-bundled web applications.
RIMTHAN-LABAnalyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.
