Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Web-28. Hijacking an OAuth Authorization Code
Mission
This OAuth 2.0 authorization provider offers a login flow, but its redirect_uri validation may be weak. Investigate whether an authorization code can be hijacked to obtain an admin-level access token.
Hints
Hint 1 Show
Check whether redirect_uri is validated by a text prefix instead of an exact URL
Hint 2 Show
In a URL, text before @ is user info and the host comes after it
Hint 3 Show
Once you have an authorization code, exchange it at /token using that same redirect_uri