offensive-oauth

1# SKILL: OAuth Security Testing
2 
3## Metadata
4- **Skill Name**: oauth-attacks
5- **Folder**: offensive-oauth
6- **Source**: https://github.com/SnailSploit/offensive-checklist/blob/main/oauth.md
7 
8## Description
9OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter abuse, open redirector chaining, token leakage via Referer, PKCE bypass, and scope escalation. Use when testing OAuth implementations in web apps or bug bounty.
10 
11## Trigger Phrases
12Use this skill when the conversation involves any of:
13`OAuth, OAuth 2.0, authorization code, redirect_uri bypass, OAuth CSRF, state parameter, PKCE bypass, scope escalation, token leakage, open redirector, OAuth attack`
14 
15## Instructions for Claude
16 
17When this skill is active:
181. Load and apply the full methodology below as your operational checklist
192. Follow steps in order unless the user specifies otherwise
203. For each technique, consider applicability to the current target/context
214. Track which checklist items have been completed
225. Suggest next steps based on findings
23 
24---
25 
26## Full Methodology
27 
28# OAuth Security Testing
29 
30## Shortcut
31 
32- Check for improper redirect validation (open redirects)
33- Test state parameter manipulation/absence
34- Manipulate OAuth flows to bypass authentication
35- Try URL path traversal in redirect_uri
36- Hunt for client secret leakage in source code/repos
37- Look for improper scope validation
38 
39## Mechanisms
40…