Netskope Threat Labs
DEF CON

DEF CON Cloud Village: OAuth-some Security Tricks: Yet more OAuth abuse

Las Vegas, NV
DEF CON Cloud Village: OAuth-some Security Tricks: Yet more OAuth abuse
Presented by
About this talk

Join Jenko Hwong at the DEF CON Cloud Village for a deep dive into new ways to abuse OAuth 2.0, from Microsoft and Google authorization code grants, to OWA browser attacks, Chrome attacks, upstream SSO attacks, and hidden uses of OAuth in Google App Scripting and Google Cloud Shell.