eval.blog

Research and Analysis on security, software, and AI by Vikrant Singh Chauhan: vulnerability research, CVEs, exploit write-ups and essays.

Popular posts: 1
Total points: 367
HN comments: 104
Rank: #7,302 personal

Visit eval.blog → On Hacker News Oct 2023 – Oct 2023

Security & Privacy 1

Most points Most discussed Most cited Newest

Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest App

2023367 points104 comments Security & Privacy details

How an open redirect in Harvest’s Outlook Calendar integration leaked the OAuth tokens of connected Microsoft accounts, with a step-by-step proof of concept.