Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)

https://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464

I wrote this article while working at the PortSwigger Research team.

Hidden OAuth attack vectors

https://portswigger.net/research/hidden-oauth-attack-vectors

I wrote this article while working at the PortSwigger Research team.