oauth-flow-hijack

What problem does it solve?

This Skill addresses the high risk of undetected OAuth flow hijack vulnerabilities in web applications, which can lead to unauthorized account access, data breaches, and identity theft when attackers intercept authorization codes or abuse OAuth callback flows.

Core Features & Use Cases

• Redirect Stoppage & Code Leakage Techniques: Provides methods to block client-side OAuth redirects, leak authorization codes via navigation history, cookie bombing, and WAF bypasses, and exploit popup/iframe name collisions to hijack OAuth flows.
• PKCE Downgrade & Framework-Specific Bypasses: Includes tests for PKCE enforcement gaps, plus documented exploits for common OAuth stack vulnerabilities like django-allauth mutable claim takeover and oauth2-proxy regex bypass.
• Use Case: Security testers use this Skill during authorized penetration tests of web applications with OAuth authentication, especially when XSS on a subdomain, open redirects, or callback interception capabilities are present.

Quick Start

Use the oauth-flow-hijack skill to test a target OAuth implementation for redirect stoppage, authorization code leakage, and PKCE downgrade vulnerabilities during your next authorized penetration test.