Discover and read the best of Twitter Threads about #oauth
Most recents (6)
At #IWCON2022, we have 15+ amazing #cybersecurity speakers from around the world 🌍
To share unique methods and findings with y’all 😍🙌
Get ready with your questions. Our experts will answer you live 🔥
Book your ticket: iwcon.live
Meet our speakers 🧵👇
To share unique methods and findings with y’all 😍🙌
Get ready with your questions. Our experts will answer you live 🔥
Book your ticket: iwcon.live
Meet our speakers 🧵👇
#1 Gabrielle Hempel @gabsmashh, #security engineer @Netwitness 🥳
Her topic: #Threat hunting in #cloud environments 🌩️
Time: 17th Dec, 7:30 pm IST
Want to attend this talk? 😍
Book your ticket here: iwcon.live
#cloudhunting #threathunting
Her topic: #Threat hunting in #cloud environments 🌩️
Time: 17th Dec, 7:30 pm IST
Want to attend this talk? 😍
Book your ticket here: iwcon.live
#cloudhunting #threathunting
#2 Luke Stephens @hakluke, founder of @haksecio 🔥
His topic: How I used #recon techniques to identify a prolific #scammer 👊
Time: 17th Dec, 6:30 pm IST ❤️
Don't wanna miss it?
Register today: iwcon.live
#infosec #hacking #hackingthehacker
His topic: How I used #recon techniques to identify a prolific #scammer 👊
Time: 17th Dec, 6:30 pm IST ❤️
Don't wanna miss it?
Register today: iwcon.live
#infosec #hacking #hackingthehacker
#IWCON2022 — The much-awaited virtual #Infosec conference is happening in a month 😍🙌
We have expert talks covering NINE major #security verticals🔥🔥
Join us & learn new skills before 2022 ends: iwcon.live 👊
Here are the session topics 🧵👇
We have expert talks covering NINE major #security verticals🔥🔥
Join us & learn new skills before 2022 ends: iwcon.live 👊
Here are the session topics 🧵👇
#1 Cloud Security:
1. #Threat #hunting in cloud environments by @gabsmashh (#security engineer @Netwitness)
2. #Hacking #cloud: for fun and profit by Dhiyaneshwaran B (#AppSec #researcher at @pdiscoveryio)
1. #Threat #hunting in cloud environments by @gabsmashh (#security engineer @Netwitness)
2. #Hacking #cloud: for fun and profit by Dhiyaneshwaran B (#AppSec #researcher at @pdiscoveryio)
#2 Bug Bounty:
1. My approach to accessing #admin panels by @hunter0x7 (admin pwner)
2. Reading #RFCs for #hacking by @securinti (head of #hackers @intigriti)
1. My approach to accessing #admin panels by @hunter0x7 (admin pwner)
2. Reading #RFCs for #hacking by @securinti (head of #hackers @intigriti)
Many of us have certainly come across the OAuth2 framework or using it without knowing it.
For example, when we visit Canva, we can sign in with our google account, in this case, google acts as an OAuth provider.
👇 Thread
For example, when we visit Canva, we can sign in with our google account, in this case, google acts as an OAuth provider.
👇 Thread
OAuth2 provides a way to access web apps with limited access to the user's account. it grants this access without sharing the password.
it functions with 3 entities that commonly use HTTP requests to communicate.
Client App - Canva
Resource owner - User
OAuth Provider - Google
it functions with 3 entities that commonly use HTTP requests to communicate.
Client App - Canva
Resource owner - User
OAuth Provider - Google
As a first step, we access the Canva website, and it provides us with these two methods of logging in. at this point we are still in Canva's website, it will redirect to the google OAuth server once we click the sign in and it will be our next step.
Code unique qui ne change pas ? Des anciens convives arrivent à squatter des chambres. Petits problème de révocation. #DevoxxFR
C'est aujourd'hui, les #esupdays #apereoparis #esupdays31 #apereoparis21. Toutes les informations sur @EsupPortail esup-portail.org/conference/ : c'est sans inscription, sur #Pod de @ptitloupau de l'@univ_lille. Lancée par @SorBrigitte @FrancisForbeau et @iandolphin24 à 10h
#esupdays #apereoparis #esupdays31 #apereoparis21 C'est parti sur pod.univ-lille.fr/live/esup-days… #Thread ⤵️
#esupdays #apereoparis #esupdays31 #apereoparis21 Introduction / Points généraux
Brigitte Sor @SorBrigitte (@toulouseinp)
Francis Forbeau @FrancisForbeau (@UnivLaRochelle)
Ian Dolphin (@Apereo Foundation). Remerciements aux collègues organisateurs
Brigitte Sor @SorBrigitte (@toulouseinp)
Francis Forbeau @FrancisForbeau (@UnivLaRochelle)
Ian Dolphin (@Apereo Foundation). Remerciements aux collègues organisateurs
@patoarchitekci @marekgrabarz @rwitkowski_asc No więc tak, przesłuchałem w drodze do ... Panie Władzo, to naprawdę moja krytyczna życiowa potrzeba ... tyle powiem w temacie wyjścia. To teraz o odcinku.
1/n
1/n
@patoarchitekci @marekgrabarz @rwitkowski_asc @marekgrabarz temat zna tak i to z praktyki, że aż mi trochę głupio że co nie powiem wyjdzie na hejt :), ale mam nadzieje że raczej będzie konstruktywnie i rzeczowo.
2/n
2/n
@patoarchitekci @marekgrabarz @rwitkowski_asc Główna rzecz (to samo było na #AzuredayPL - to do czego mam zastrzeżenie to przekazywanie że #OpenIDCOnnect to jest część #Oauth - tak nie jest. Ogólnie temat odcinka nie powinien brzemieć #OAUth i nie o to powinny być pytania.
3/n
3/n
