HTB CWEE

HTB Certified Web Exploitation Expert (CWEE)

Oauth Oidc AttacksEnglish
Exam overview

Practice session

In an OAuth 2.0 authorization code flow, which attack exploits a missing or predictable 'state' parameter to perform CSRF on the authorization endpoint?

Loading your practice session…