#NahamCon2024: OAuth Secret | @BugBountyReportsExplained

LIKE and SUBSCRIBE with NOTIFICATIONS ON if you enjoyed the video! 👍

For many hackers, changing the redirect_uri to an attacker-controlled host is the only attack they know. But in 2024 it won't work. We have to work harder - exploit and chain multiple smaller bugs together to get the account takeover. Those chains will be the topic of this talk.

📚 If you want to learn bug bounty hunting from me: bugbounty.nahamsec.training
💻 If you want to practice soem …

account account takeover attack attacker bugs changing exploit hackers host notifications oauth secret subscribe takeover video work