HACKING OAuth 2.0 FOR BEGINNERS!

I'm a pentester and a bug bounty hunter who's learning everyday and sharing useful resources as I move along. Subscribe to my channel because I'll be sharing my knowledge in new videos regularly.

SIGN UP ON Intigriti:

BUY ME A COFFEE:

TIME STAMPS:

00:00:45 - What is OAuth 2.0?

00:01:05 - Uses of OAuth 2.0

00:01:30 - Entities in OAuth 2.0

00:02:09 - Types of Flows of OAuth 2.0

00:02:30 - Authorization Code Grant Flow

00:04:11 - Implicit Grant Flow

00:05:11 - Practical Exploitation

00:05:36 - Reusing Access Tokens

00:07:05 - redirect_uri Not Validated

00:08:52 - CSRF

SOCIAL MEDIA:

OAuth 2.0 LAB:

OAuth 2.0 RESOURCES:

[Vinayak-qp]

amazing, this could be probably one of the biggest information that i have ever been given..the way how you explain is an amazing..we need such playlist more and more in upcoming days

[rayancrasta]

Shez doing a great job on youtube cuz to get sponsors within just <10 vids is awesome! Also shez playing an important role for women empowerment in infosec

[soufianeamed]

Yaw Farah This Is Just Awesome, Brief And Useful That's Why I Love What You Are Doing, Keep It Up And Stay Safe .

[muizzraheem]

Have been having issues comprehending Oauth, this video is a problem solver thanks farah ❤️

[devvishack]

Aweeome . Just awesome . For noobs like me who are just starting in bug bounty . This is the place where we can learn basics in depth. Thanks .
Please keep posting more such practical videos .

[yosoffmalik]

You are good with knowledge and theoretical stuff, your videos gets me into reals basics of topics

[the_linux_guy]

People were getting jealous of Bugcrowd sponsoring ...now Intigriti has sponsored ...and soon Hackerone will ...to hell with them 😂😂...keep up the good work 👍🔥

[vaibhav]

How old are you? Don't think you are out of school yet. But, amazing grasp of the subject. Kudos!!

[shubhamghosh]

Farah you are doing great! Very informative video. You taught so many things in just 10minutes.

[sudiptapandit]

Isn't OAuth is for authorization part only? the 'Sign in with' buttons use OpenID Connect protocol not OAuth. Although nowadays people use these terms interchangeably .

[swapnilpotbhare]

Excellent, and very good command over Knowledge

[ravichhetri]

Hi Farah, Do you take session on the bypass techniques for Saml, Oauth, oidc..I am very much interested.

[adminhackstar]

Make an video on best course for beginners in ethical hacking

[sohamprince]

Awesome.. loved the way you teach the concepts and the labs!! Keep it up!

[albertobarbieri]

Your videos are amazing. Simply to understand and very explicative.

[chinmay]

can you make a video on your journey of how you became a hacker

i want to learn to do all of this stuff but really don't know where to start with .please make a video on it.
and if you can refer to any video on youtube .i mean for learning.

[m.waheedanwar]

Beautifully explained hope to get more knowledge from you girl.More power to you

[vasuyadav]

Hi Farah can you please tell the impact of the csrf one and reuse of token and also there severity category?
Btw nice video

[raselmir]

Great job. Thanks man. Now I am clear.

[jayeshprajapati]

Can you make a video on your cyber security journey ??

Video is good👍👍