Open Redirect Leading to OAuth Access Token Disclosure!

[@bertrandfossung1216]

Thanks very much. You explained this vulnerability so flawlessly.

[@intigriti]

You're very welcome! We are happy it has helped you 😇

[@phinehasantwi9615]

Thanks, hoping to get more from Intigriti...

[@intigriti]

What exactly are you hoping for? 👀

[@ManMan-cl1gg]

great explanation, thank you

[@intigriti]

You are welcome! 😇

[@edoardottt]

Thank you! I really need this :)

[@intigriti]

You're so welcome! 😇. Glad it helps!

[@xoro163]

this should be an expert lab

[@intigriti]

Hehehe :)

[@TheHexix]

I dont really know why i dont have a # mark and the exploit still workin

[@mnageh-bo1mm]

i am still unable to understand the js code ,
window.location = '/?'+document.location.hash.substr(1)

[@intigriti]

Hey, you can double check through the written solution on Portswigger for further clarity 🙂

[@Rounak_Bania]

Hii This Video Was Really Helpful But i have a question can we use burp collaborator link instead of exploit server url if not then how can we make our own exploit server for real world scenario Thanks.

[@intigriti]

Hi there, there's a million different ways on how to run your own website / your own webserver (exploit server). We don't have a video on that yet but you can quickly get some really good tutorials by googling for it.

[@Rounak_Bania]

@@intigriti No worries I've found a way by using linode server btw thanks for your videos.

[@huyvuquang2041]

Please check your mic. It always creates high pitch sound and the end of the word when you talk. Hurt my ear a lot. Check it with your earphone on.
Tho, good content. Ty

[@intigriti]

Our apologies! We'll check it!

[@jxkz7]

yes same here

[@darccau7204]

Thanks

[@intigriti]

Welcome 😇

[@khalidAnu]

Hello

[@intigriti]

Hello back 😇

[@ntf.sadnan]

bal toamr sound thik koro! kane lage onek! vabio na j respect korbo

[@intigriti]

We unfortunately don't speak that language, but thanks!

[@ntf.sadnan]

@@intigriti huh ,, you never gonna understand what i told ! ;)