saint-graves/sica-fondt
1
0
Fork 0
mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 16:40:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
sica-fondt/knowledge/cyber-skills/skills/testing-oauth2-implementation-flaws/references/api-reference.md
Claude 24f816b6a3
Consolidate 22 sibling repos into layered organism structure 
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2026-06-10 06:53:01 +00:00

1.9 KiB
Raw Blame History

API Reference: Testing OAuth2 Implementation Flaws

OAuth 2.0 Grant Types

Grant Type Use Case Risk Level
Authorization Code Server-side apps Low (with PKCE)
Authorization Code + PKCE Mobile/SPA apps Low
Implicit Legacy SPAs High (deprecated)
Client Credentials Machine-to-machine Medium
Resource Owner Password Legacy migration High

OAuth Attack Surface

Attack Severity Vector
Redirect URI bypass Critical Subdomain, path traversal, encoding
Missing state parameter High CSRF-based account linking
PKCE bypass High Authorization code interception
Scope escalation High Request unauthorized permissions
Code reuse High Replay authorization code
Token in URL fragment Medium Referer header leakage
Implicit flow Medium Token exposure in browser history

Redirect URI Bypass Techniques

Technique Example
Subdomain append redirect.com.evil.com
Path traversal redirect.com/../evil.com
At-sign confusion redirect.com@evil.com
Fragment bypass redirect.com%23@evil.com
Query parameter redirect.com?next=evil.com
HTTP downgrade http:// instead of https://

Python Libraries

Library Version Purpose
requests >=2.28 HTTP OAuth flow testing
secrets stdlib State/nonce generation
urllib.parse stdlib URL parameter encoding
hashlib stdlib PKCE code challenge

References