Detecting OAuth-related issues
OAuth is an open standard that allows authorization in applications by sharing the authorization information between different applications without sharing the user's identify. This is the current standard used by Facebook, Google, Twitter, Plurk, and so on.
The most commons issues related to OAuth are the following:
- Insecure storage secrets: OAuth is information that is stored on the client side. If the application does not store the OAuth information in the correct way, it exposes access to more than one application.
- Lack of confidentiality: OAuth is a protocol that shares the authentication information with more than one application, but, what happens if it is shared with the wrong application? Well, it could be reused by other applications to steal the user's access.
- URL redirection: If an application has a vulnerability that allows redirects, the malicious user can steal the OAuth information.
Detecting SSO protocols
There is an extension named EsPReSSO that...
