https://blog.sicks3c.io/tags/mobile/Recent content in Mobile on SicksecHugo -- gohugo.ioen© 2026 SicksecFri, 01 Sep 2023 07:32:53 +0800https://blog.sicks3c.io/research/ato-via-facebook-oauth-due-unsanitized-schema-allows-to-steal-oauth-token/Fri, 01 Sep 2023 07:32:53 +0800https://blog.sicks3c.io/research/ato-via-facebook-oauth-due-unsanitized-schema-allows-to-steal-oauth-token/<h1 id="deep-dive-into-an-oauth-exploit-a-0-day-case-study">Deep Dive into an OAuth Exploit: A 0-Day Case Study<a class="heading-anchor" href="#deep-dive-into-an-oauth-exploit-a-0-day-case-study" aria-label="Link to Deep Dive into an OAuth Exploit: A 0-Day Case Study">#</a></h1> <p><strong>Hello Everyone,</strong></p> <p>In our continuous hunt for novel attack vectors and security challenges, <a href="https://x.com/wld_basha" target="_blank" rel="noreferrer"><strong>mainteemoforfun</strong></a> and I embarked on an in-depth exploration of <strong>mobile authentication mechanisms</strong>. Our efforts culminated in the discovery of a striking <strong>0-day vulnerability</strong> back in <strong>2023</strong> that has since been patched.</p> <p>This vulnerability enabled us to potentially hijack user sessions on websites utilizing <strong>Facebook’s “Login With Facebook”</strong> feature. By manipulating the <strong><code>redirect_uri</code></strong> parameter in the <strong>OAuth</strong> flow, an attacker could redirect authentication tokens to a host under their control.</p>