OAuth / OIDC
redirect_uri tricks, implicit flow, mixed response_type, state CSRF. Pair with the OAuth playbook.
Tags: oauth, oidc, ato
Controlled probes
redirect_uri=https://target.com.evil.exampleredirect_uri=https://target.com/callback/../../redirect_uri=https://target.com%40evil.exampleresponse_type=tokenresponse_type=id_token tokenstate= (empty / missing)