OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
CSRF attacks against OAuth

From: Jake Spekle (jake.speklegmail.com)
Date: Mon Nov 03 2008 - 08:23:18 CST

I came across this blog post this morning and thought it was
interesting and worth posting here:

http://blog.cliqset.com/2008/11/02/csrf-and-oauth/

Considering what OAuth is designed for, it seems like CSRF attacks
against it could prove to be quite fruitful for an attacker.

-
JS

-------------------------------------------------------------------------
Sponsored by: Watchfire
Methodologies & Tools for Web Application Security Assessment
With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------