STRLCPY/AllAboutBugBounty

Total 1 files

■ ■ ■ ■ ■ ■

OAuth Misconfiguration.md

		skipped 10 lines
11	11		10. Only company's email is allowed? > Try to replace hd=company(.)com to hd=gmail(.)com
12	12		11. Check if its leaking client_secret parameter.
13	13		12. Go to the browser history and check if the token is there.
	14	+
	15	+	Reference:
	16	+	- https://twitter.com/tuhin1729_/status/1417843523177484292
	17	+