Other nomination
How I hacked GitHub again
Chains five low-severity GitHub OAuth bugs: redirect_uri path traversal with slash-dot-dot, no redirect_uri check at the token endpoint, a Camo proxy bypass that leaks the code through the Referer, Gist exposing the access token in a cookie, and auto-approved scopes. The result is a script-less takeover with read and write access to private repositories.
Record
- Published by
- homakov.blogspot.com
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of homakov.blogspot.com, first published at the original source. Preserved copies are kept so the citation survives its host.